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(57) Abstract 



A network provides users with a simple and secure way of establishing communication sessions with other users or services, running 
either over IP networks or other networks, e.g., PSTN. In a sense, the network can broker communication services between two or more 
users (e.g., people) and/or services. A plurality of different clusters of servers is provided, and each of the clusters may be linked together. 
In certain embodiments, each cluster includes multiple servers. Users are registered within some specific cluster and given a unique 
system/network ID. In certain embodiments, messages are not sent directly between users, but instead through at least one intermediate 
routing service (RS) provided on a server of one of the users. Thus, in certain embodiments, a user may hide or mask his/her personal 
information from other users even when communicating with them. In certain embodiments, a user may establish a communication session 
with another user without knowledge of the client device (e.g., PC, mobile phone, etc.) being used by the other user; as the network 
arranges for communication (e.g., text chat session, voice chat session (PC to PC, PC to PSTN, or PC to mobile phone), web conference, or 
pages (PC to PC, PC to SMS)) between the users regardless of the client device being used by the called user. Thus, the network enables 
any of the above communication services between users, and the initiating user need not know whether the other user is currently online 
via his/her PC or may instead be reached via pager or mobile phone. 
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This is a continuation of U.S. Provisional Patent Application Serial No. 
60/1 33,401 , filed May 10, 1999, the disclosure of which is hereby incorporated herein 
by reference and on 'which priority is hereby claimed. 

A DISTRIBUTED SYSTEM TO INTELLIGENTLY ESTABLISH SESSIONS 
5 BETWEEN ANONYMOUS USERS OVER VARIOUS NETWORKS 

FIELD OF THE INVENTION 
This invention is related to a system and corresponding method of establishing 
communication session(s) between users as a function of their availability and/or 
communication device(s). 

l0 BACKGROUND OF THE INVENTION 

Typically, users of communication tools (e.g., mobile phone, PCs, email, etc.) are 
faced with two essential tasks: locating the device address of other users to 
communicate with, and establishing a communication session with that device. These 
tasks typically differ depending upon what device the user(s) is/are using. For example, 

is on a mobile phone with messaging capabilities, users usually locate other users by 
finding them in their local address book, and then establish either a voice session with 
that user by dialing a phone the user's phone number, or they may type in a short text 
message (STM) and send that to the other user, either to their mobile phone or their 
email. Depending on the phone operator of the callee, he/she may or may not be able to 

20 receive these calls. 

As another example, a user of a PC based text-chat software may have a list of 
other users that they can initiate a chat session with. However, they will only be able to 
do so when the other person is logged on. When logged off, they have no way of 
determining how to reach that person, nor can that person be made aware that someone 
25 is trying to reach them. 

Thus, problems to be solved may include any or all of the following. How to 
make contact information available and configurable centrally, independent of devices, 
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and give users a single address to use for all communications. How to advertise the 
availability of a user to participate in some kind of communication session. How to 
initiate a communication session with another user (i.e., a contact) independently of 
devices and thus without knowing any device addresses of the contact in question. How 

5 to enable users to centrally control how calls intended for them should be handled with 
or without their direct intervention. How to insure tnteroperability of these functions, 
when the callers and callces devices are on distinct networks, possible operated by 
different service providers. How to keep other users from changing a user's contact 
information or routing settings or in any other way impersonate another person. How to 

m allow a user to block annoying people from contacting him/her in a central location. 
How to enable more than one organization/company/operator to provide services 
described herein in an efficient and/or interoperable way. 

The SS7 system allows intelligence in routing decisions made when setting up a 
phone call (e.g.. see Intelligent Network (IN) architecture originated by Bell 

is Communications Research), in which the service logic for a call is located separately 
from the switching facilities, allowing services to be added or changed without having 
to redesign switching equipment. A later version of IN called Advanced Intelligent 
Network (AIN) introduced the idea of a service independent architecture in which a 
given pan of a telephone number can be interpreted differently by different services 

20 depending on factors such as time of day, caller identity, and type of call. AIN makes it 
easy to add new services without having to install new phone equipment. 

Unified messaging systems allow users to provide essentially one address for a 
variety of communication options, typically including phone calls, voice mailbox, fax, 
and e-mails. Typically, all messages are stored in one centralized inbox, that the user 
25 can access from different devices, sometimes using media translations (e.g., converting 
text messages to voice). This effectively reduces the number of device addresses (hat a 
user needs to give out. There are numerous companies working with unified messaging 
products. 
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Various companies have created networks running on top of the internet that, 
allow users to send each other short text messages and monitor the status of other users, 
where the status is usually defined as whether a user is currently connected to the 
network or not This kind of functionality is currently being considered as an IETF 
standard called IMPP (Instant Messaging and Presence Protocol). 

The Session Initiation Protocol (SIP) is in the process of becoming an IETF 
standard, and has been positioned as the successor of SS7 in IP based networks. The 
protocol basically allows users to invite other users to arbitrary communication sessions 
over the Internet, and at the same time allows for arbitrary routing of these invitations. 

The aforesaid IN and AIN approaches used in SS7 are limited to the phone 
network and are not easily extendable to other networks like the Internet Thus, there is 
no easy way to advertise availability of other users to communicate. There also is no 
easy way for users to configure their routing, except through limited interfaces. Instant 
messaging systems are typically only IP based, and do not in general allow 
communication across different networks. Most such systems rely on users to be 
connected to the system in order for their routing to be active and they disclose network 
addresses to other users, which potentially can be considered a security breech. 
Furthermore, most systems rely on a centralized architecture which may make it 
difficult to distribute a user database and traffic among many providers. 

In general, various systems address a portion of the problems discussed above. 
However, there exists a need in the art for a system/network and corresponding method 
for handling one or more of the aforesaid problems in a more comprehensive manner. 

SUMMARY OF THE INVENTION 

A system includes a loosely confederated network of server clusters along with 
any number of client terminals (i.e., clients) that connect to the clusters. 
Terminals/clients can be software entities running under some operating system or any 
other device running on some communication network that can have access to the 
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duster. Users are registered within some specific cluster and give* a unique user ID. 
This user ID along with the ID of the cluster (C1D) coustitutes a globally unique user ID 
(UID) within the whole system. Users can be huu^ or any other eudty tl« connects to 
AeclustervUsomccuentterminalorby^ Teimmaiscan 
gam access to any number of services running within the clus«, or to services ranmng 
in other clusters (a "service" is a software entity that can have arbitrary functions). The 
connection between the terminal and the duster is secure, and ,nay use cryptography m 
certain embodiments. 

Basic services which may be provided within each duster, indude, for example: 
1) dynamic user properties, caUed online status or user's "presence", that allows users 
m d clients to centrally define and modify «*a points Baked to mem; these changes can 
etther be manual (explicitly made by the user) or automatic (by some client or server 
side logic); 2) contact list and contact notification, that allow users to subsenbe and be 
notified of the online sums of omer users, and/or be notifiedof change of other user's 
presence information; and 3) routing service mat aUows users to ser-i r^meso f,e.. 
invitations) for coromunication sessions to other users, as weU as conf.gureh<»w these 
invitations are handled depending on the user's current presence irfc^uon. 

The routing service allows users to send invitations to ofiux users to establish an 
aAtaary communication session (e.g.. text chat session, voice chat session, web 
conference, etc.) over arbitrary networks. The requests are not semdirecfly between 
users instead, the routing service for the sendmgfinviting user sends the invitation to 
rerouting service for the receiving user. The routing service for the receiving user 
determines, according to a logic spedfied by me same receiving user, how the request ts 
handled and what services are available to handle the request. For example, the routing 
service for the receiving user may forward the invitation to the receiving user's cltent, 
nmy ignore the invitation, may forward the invitation to the receiving user's mctale 
phone, or may forward the invitation to the receiving user's inbox so mat the user may 
later read the invitation* 
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The cluster and services within it make the necessary minimum setup for the 
session to be established, and thus no network addresses need to be exchanged between 
the users, thus retaining the anonymity of the users. As users can be software entities as 
well as persons, the system allows communication sessions between users and arbitrary 
5 data services. In certain embodiments, the system does not need a central database of 
all users to function, but clusters can forward requests to other clusters, and thus insure 
the connectivity of all clusters within die system. 

The application provides users with a buddy list (i.e., contact list). A user can 
add other users to this list and organize them into groups. Using the application, the 
10 user can be aware of the online status of users in his/her buddy list (i.e., contact list), 
and get notification when these users* status(es) changes. Moreover, a user can set 
his/her own online status, make himself/herself invisible to annoying users, and send 
users in his/her buddy list any kind of message with a simple double click. 

In certain embodiments, messages are not sent directly between users, but instead 
15 through at least one intermediate routing service (RS) provided on a server of one of the 
users. Thus, in certain embodiments, a user may hide or mask his/her personal 
information from other users even when communicating with them. In certain 
embodiments, a user may establish a communication session with another user without 
knowledge of the client device (e.g., PC, mobile phone, etc.) being used by the other 
20 user; as the network arranges for communication (e.g., text chat session, voice chat 
session (PC to PC, PC to PSTN, or PC to mobile phone), web conference, or pages (PC 
to PC, PC to SMS)) between the users regardless of die client device being used by the 
called user. Thus, the network enables any of the above communication services 
between users, and the initiating user need not know whether the other user is currently 
25 online via his/her PC or may instead be reached via pager or mobile phone. 
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Flgur e ^aschcn^diagramof.p^ofserverclus^co^ 
together according to an embodiment of to in™***. 

, accor ding to an embodiment of Ah invention. 

Bgure 3 is a iuncno^idiagnnnUtas™^ how abuser (having a client A, 

forwards the invitation message to client B. 
B-s mobile phone became elientB's client is not onto*. 

■ ■ , Lssase to another user which is a service such as a software enuty accordmg 
13 invitation message to anoxner u*« routing 

to an emooouuo that communications can be set 

up between the tot user and the software entity. 

when launch* the client application prompts me user (or a user name, 
K user server and establish a secure communication w.th it 
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Figure 8 illustrates an exemplary contact list of a user as it appears on the user's 
terminal/client's display screen according to an embodiment of this invention. 

Figure 9 illustrates a menu list of a plurality of different types of invitation 
messages which a user may choose from to send to another user, this figure illustrating 
how the menu list appears on the user's terminal/client's display screen according to an 
embodiment of this invention. 

Figure 10 is a functional diagram illustrating how each operator may run one or 
more clusters according to an embodiment of this invention, where each of the clusters 
can communicate with one another so that invitations/messages/data can be sent from a 
user on one cluster to a user(s) on another cluster. 

Figure 11 is a functional diagram illustrating the server structure (e.g., 
communication links between respective servers and between servers and respective 
clients and database(s). 

Figure 12(a) is a diagram illustrating how an exemplary mapping function of 
Figure 1 1 works according to an embodiment of this invention. 

Figured 12(b) illustrates a user identification (UID) which is given to a user, that 
is applicable throughout the entire application or system/network, according to an 
embodiment of this invention. 

Figure 13 is a functional block diagram illustrating exemplary components of the 
cluster of Figure 1 1 according to an embodiment of this invention, and further 
illustrating how the cluster may communicate with other entities such as clients, other 
clusters), and/or the Internet. 

Figure 14 is a flowchart illustrating steps taken when a user sends an invitation 
message to another user according to an embodiment of this invention. 

<WO_0089 1 40A 1 _L> 
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u ' n Kt^tinB steps taken when a user (e.g., Carl) setsupa 
Figure 15 is a flowchart illustrating steps cu«=» 

ngurc according to an embodiment of 

chat session with at least one other client (e.g., Anne), according 

this invention. 

, OT ^stnicture(s) on a user server, via the user 

Figure 16 illustrates exemplary data saucuuw 

10 this invention. 

Figure ISfo ilrashaies a data structure for user profiles according to an 
embodiment of this invention, 

. «f tVik invention, wnerem a ubci w 

procedure or se^ acc^ins * - ^ ^ comes 

a user's client can be monitoring the contact Bl and knows v* 
20 online and when the contact goes logs off. 

figure 22 is a schematic diagram illustrating steps taken during a or 
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Hgure 24 is a schematic diagram illustrating steps taken (i.e., a message 
sequence) when a user inverts his/her blinded user list according to an embodiment of 
this invention fihe sequence is similar to the one when a user is added to a blinded list). 

Figure 25 is a chart illustrating a siimmation of database operations (e.g.. queries 
to the database) for contact list functionality according to an embodiment of this 
invention. 

Hgure 26 illustrates the position and/or functionality of an administration 
tool/service according to an embodiment of this invention. 

TOTTATUm DKSnRlPTION Off CERTAIN 
FYFWLARY FMBQDlMENT g ™r TUTS INVENTION 

In the following description, for purposes of explanation and not limitation, 
specific details are set forth such as partocularembwuinenU network architectures, 
signaling flows, protocols, techniques, etc, in order to provide an understanding of the 
present invention. However, it would be apparent to those skilled in the an that the 
present invention may be practiced in other embodiments that depart from these specific 
details. In certain instances, detailed descriptions of well-known methods, interfaces, 
devices, protocols, and signaling techniques are omitted so as to not obscure the 
description of the present invention with unnecessary detail. 

Initially, it is noted that the notations in software design diagrams comply with 
the UML standard (Unified Modeling Language) in most cases. The same notation is 
used for data diagrams as is used for class diagrams. The reader should therefore note 
whether data structures or conventional classes are being described. In high-level 
sequence diagrams, half-arrowheads are used for messages with no reply. Whole- 
arrowheads are used for a request-reply message pair in those cases where the exact 
details of the back-and-forth communications are not important 
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Familiarity with ft. drawings and certain terms is helpful to - 
^application. T^se.f^be.ow.re.pl^ofdanidonsto^.yU.to 

application and the patent to result therefrom. 

pCTrTNrnoN°"fl "SR a»y OF rgRTAffl TfffiMS VSEOBEEEffl 
"Community.- « - of users wUh which a user can interact toughlu^er 

"Ms U defined by how servers are grouped together a* - — - 

users connect* 

-Application." TMsrefersWtoentiresys^rwoAofdnstovennonr 
,„ including .be cUent-side software. ft. software, ^edausu.red. and 4e 

functionality of this system as a whole. 

"Client." The software used to access fee application from the client or user side. 
-Back-end." Thesetof servers, networks, and software* which a given client is 
connect direct* or indirectly 0* its local duster, plus any clusters the l«*c,naer 
15 is connected to). 

"duster." Acouectic*o fS erverspl»..da^e.«^ 
reliable, secure network. The back-end is a set of interconnected clusters. 

■User." AM.^<»"f^^^«**'* tnC * i ° a * Bm *' i 

20 client 

"Framework." The application framework ma, is common to back-end servers. 
"Service." A service is a software entity which resides on. e.2- a server and 
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specified by a protocol description, which defines in a non-ambiguous way how to use 
the service. 

"Service creator." A programmer that writes a service. 
"Client implementor." A term used for programmers that create clients to the 
back-end system. 

"Message." A piece of information sent from one user to another. 

"Control message." A piece of information sent from a client to a server or from 
a server to a client or between servers. Control messages are used to access the 
functionality of other components of the system. 

-Request." A control message initiated by a client and sent to a server. 

"Reply." A control message sent from a seiver to a 

"Notification." A control message imtiated by a seiner and sent to a clienL 

"Response." A control message sent from a client to a server in response to a 
notification. 

"Mode of communication." The method used for real-time communication, e.g., 
voice, herein. 

"Conversation." A dialogue between two or more users carried out in real time. 
A "message type" is the type of information sent in a message, e.g., a short text 

message. 

"CS." Connection Server. This can refer to the server software and/or the 
machine running it. Which is being referred to should be obvious from context 

~ "DB." Relational database, preferably including the iriachine running it 
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„ -n«ci«; conceptually a angle entity but is 

"UMF." User Hoping function, ms is concep 

. r o m and ICS, and thus inay be multiple entities, uivir 

... ^nBalthon^itmaybeotheiivisestoredmother. 
is preferably stored in the DB, altnougn u 

embodiments. 

••GRID.- Group identifier for contacts in contact list 

"CID" Cluster identifier 

^^.^^^^^^ 

"ICSID." Intra-Cluster Server identifier 
"UflD." User identifier 

* > orv^r software and/or the machine running 
"US " User Server. Can refer to the server software 

U.WWchisb^re^^ 

"USID." User server identifier. 

... ^ ««*f-ive messages of one or oiore 
„, » An pntitv which can receive me^fi 1 * 

machine. 

20 phone, which is a short ■*« message repertory, and 

conversations. 

Me rs as defined in thebuady/contae*. Ap^^-* 
every user .here is a route for every mode of common. 
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DESCRIPTION OF EXEMPLARY EMBODIMENTS OF THE INVENTION 

A system/network according to certain embodiments of this invention includes a 
plurality of client applications (e.g.. Win32 operable by respective users) and a back- 
end server system having a plurality of clusters (e.g., running on Windows NT), A 
main function is to provide users with a simple and secure way of establishing arbitrary 
communication sessions with other users or services, running either over IP networks or 
other networks, e.g., PSTN. It also provides operators (an operator is one who operates 
or manages at least one cluster) a comprehensive environment in which to deploy value 
added services (e.g., search engine services, database services, shopping services, 
services for sending users stock information such as stock prices, video conferencing 
services which enable user(s) to set up a video conference via a video conferencing 
server that is external to the application, etc.) to their users and to be able to charge for 
their use, as well as providing them a way to link their installed base of services over to 
IP networks. In basic terms, aspects of the systemfoetwork act as a brokers), and can 
broker communication services between two or more people (or their respective 
clients/PCs/phones), as well as broker access to value added services, some 
communications based — others not Access to the services is provided either by 
lightweight clients, tunning on various operating platforms or through gateways for 
browser based systems, such as WAP (Wireless Application Protocol). The 
system/network is designed to enable easy building and operation of Value Added 
Services (VAS), using the user management functions, security, authentication and 
charging features of the system/network as their base. Since the system/network is 
designed to offer accessibility and mobility, a user will be able to access his or her data 
and services from virtually any communication device - computer, mobile phone, 
handheld devices etc. ensuring a broad reach for Value-Added Services of the 
system/network 
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H«ure I mustrate* a plurality of eta 1 * 
conuiuuucaie with one another, while Figure 2 illustrates an exemplary cluster 1 
Rg ,en*odin>e»t Refers »F lg u« 2. ,b»c instate, of u^sys^^ 

S ervice*5. S»ch.coneea«ofserv« B i S caBrfach B «l» S sho™u,F 1 g.2. A 

C ' t . „„ ^rf. acccss to its functionality through some weU 

external servers. Each serv.ee can provide access to 

^U* can request ^service by nan*, and establish a connection with it using a 
service specific protocol. 

lhattypicauy ^.^wsflcoort Streams established through 

, fewall 9. and listens for connection a specific port. _ 

^ ta the ease of . Win32 clien. As such. «he duslex X ^ wi* *U coaneaed 
protocol m , ^ vaIe network within which connections 

nscrsVandeUenuncanformavutnalpn^-e^ ^ 

<v~»iv ^Tahlished. Connections can aiso w 
between series can be freely estabhshec. Such connections 

,„ services and/or users 7 in different clusters 1. as .Huso-ted m Kg. 1. S 
' go through a special integer service, which ear. limit ^ ™« ""^l 

embodiments of this invention. 

Additional servers and software that fall outside of this architecture may also 
* form an integral part of an installations). As such they are considered part of the 
25 ionn ouui b ^M-5/„ a oracle 8} and various operation 

cluster, examples being a robust database(s) 13 <e*, Oracle g) 

andniamtena^^^ 
communicate. 



BNSDOC1D* <WO_0069140A1J_> 



WO 00/69140 



PCT/SEOO/00926 



15 



10 



IS 



Typically, certain servers 3 are set up wilh a given configuration of services, and 
these might sometimes referred by some given name, e.g., servers that run the 
connection service for external clients are called connection servers as discussed 
hereinbelow, though they do not differ architecturaUy from other servers. 

In certam embodiments of this mveiition, by default a cluster 1 will run a basic 
set of services. In exemplary embodiments, this basic set of services may offer the 
following features: 1) allow each user (or user's client) 7 to have a unique identity 
within all clusters; 2) provide each user 7 the ability to connect and be securely 
authenticated by the cluster 1 using mat identity; 3) pxovick each user 7 the ability to 
define arbitrary sets of data related to that identity (this data is persisted or stored in me 
database 13, and this data is referred to herein as -presence" data of the user); 4) 
provide each user 7 the ability to publish a dynamic status information and/or presence 
information related to their identity (in a simple case, this status or presence might be 
whether the user is currently online on his/her PC or not); 5) provide each user 7 the 
ability to monitor the status/presence of a given set of other users 7 (in the same or 
different clusters)), and be notified of any change thereof; and 6) provide each user 7 
the ability to look for other user* s identities) using queries by name or other useful 
criteria. 

Referring to Figures 3-6. a function of the system/network is to provide the 
possibility for users 7 to establish arbitrary communication sessions with other users 7. 
Different types (e.g., voice or text) of communication may be established in different 
embodiments. The system/network handles the initial discovery of the mutual 
communication channel using "invitations." Stations" may also be referred to as 
invitation messages or INVTTE(s) herein, for purposes of simplicity . 

An invitation is basically a request from one user 7 to another to join ram/her in 
some given type of communication. The format of these may follow the IETF standard 
called SIP (Session Initiation Protocol), in certain embodiments. Typically, a client 11 
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invitation to ead.type.Whe. »«ser7 ^ a ^stingte 

ctp message and seaid it to a spea<u 

^ a paniculat romtog service provdcd <» the «er 

« • n»Q\i< invoked in the context of 
t^ wnts the Routing Service (RS) is invoiLcu 

«»*»««~ A f uncuoa of .he * users, but always from & user to 

that accept invitations are called device 

rWmts to which the routing service can 

-.^^c Device handlers are specuu^uj' 
dispatch invitations. Device 

telecommunications network, a device nan 

information to some 
Chatin^tionstoendupinu.cPSWnetwoxk.ABofl.erdev.c 
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text pages to the GSM network. All services and device handlers can access 
administrative information in the database, e.g., for checking user* s accounts and 
permissions to use the specific service. This allows centralization of service billing in 
the database. Services can easily be created and deployed within the system using a 
service SDK. In this manner, support for routing to new networks or existing services 
can easily be added to the system. 

Referring to Fig. 3, a first user A (having a client A) desires to send an invitation 
message to user B (having client B). As an illustration of a device handler, a connected 
client 1 1 can present itself to user B's RS as being an eligible end point for invitations 
of certain types. For example, if user A sends an invitation for text chat to user B as in 
Fig. 3, and user B has his/her RS configured such that when he/she is connected to the 
cluster, all invitations should be forwarded to his/her client 1 1, user B's RS sends the 
invitation message accordingly and the invitation ends up at user's B client 1 1 for 
access by user B. In this case it is assumed that on user B's client 1 1 , there exists some 
code that will accept and process this specific invitation. 

As shown in Figure 4, in other cases device handlers are not clients 11 of users 
but instead are actual services 10 running (e.g., on servers or other devices) within the 
cluster. These services 10 typically interface with some external devices or networks 12 
(e.g., telephone or other network), translating the invitation to whatever signaling 
protocol is adequate for that device or network 12. In Figure 4 t user B has instructed 
his/her RS to forward invitation messages to his/her mobile phone 14 when user B is 
not online. Thus, user B's RS forwards the invitation message to service 10 which 
interfaces with the external cellular telecommunications network (e.g., GSM), which in 
turn enables the message to be forwarded to die network and ultimately to user B's 
mobile phone 14. In this manner, a device handler 10 might translate an invitation to an 
actual phone call to a user. 
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„ staud before, *« Mta mechanism **■ - * "» 0n ^ 

as IP number or pbonc number, in certain crnoou^ 

as lr numu* k _ . n _. have to WO ny about how to reach other 

n^rs Given an invitation from a user 7, tne^oiuu* 

users, oivcu au _ handled, without the calling 

/• *»,,- ™i W> will decide how this invitation should be nanoieo, 
(i.e., the caliee; wm uectu* . qt , t ,„ 1 h-tween ihe users 

nr raltart having to know how the communications channel between ine 

■ invoked whether network addresses acuially end up bemg 

creation types is thus up to -he open** that • 0— - «T 

embodiments of this invention. 

^ • i;n,«f a cluster lean be extended by the use of 

^ce^ers^-aspec^jof e™ * 

possibly interface with some corresponding 

goes way beyond the elementary one described above. 

5 e . . elients 10 -mese are services 16 that actually use the 

client/server protocol ^^"^^^^^^^^ 

'artificial' users 16 are called agents. From a user point o 
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any other user, i.e., he/she can monitor its status and send invitations to it. The 
difference is that when communication is established between a user 7 and an agent 16. 
it really is a form of interaction between the user and some software entity. The type of 
communication might be voice or text, but more likely it would be some custom data 
5 communication between the agent and some special client software installed cm the 
user's machine. This type of extensibility allows for novel and interesting services. 

As seen above, many services might off er access to chargeabk resources; such as 
me phone system, acenulartelecommurucations ^ 

or the like. This calls for a way to control the access of users 7 to these resources and a 
10 wayofinomtoringtheirus^e.^ 

to this invention may support the notion of account types for users, where each account 
type gives access to some set of services. In this manner, control of service usage can 
be administered easuy. Fc. more detattedchargmg. each services 
billing policy and act accordingly. Some services might choose to simply log all 
15 activity, for later accounting, while others might dynamically monitor the user and then-, 
current account situation, possibly terminating a session if a credit goes down to zero. 

Referring to Figure 6, as users 7 have a globally unique identity, connections 
between users can be forwarded across clusters 1 (i.e., from one cluster 1 to another 
cluster 1). This may be done via a special service. Le., the inter-cluster service, that acts 
20 as aproxy between services in different clusters. Prom the point of viewof thesemces 
involved, the proxy is preferably transparent or substantially transparent. Theonly 
Hmitation is that the cluster operator can configure the inter-cluster service to only allow 
remote access to a limited set of services. Thus operator specific value added services 
can be made exclusive f or a given cluster. 

From a user 7's perspective, a client 1 1 appears to the user as a small 
inconspicuous application, which in closed form on a user's PC appears as a small ball 
on the desktop. As shown in Rgure 7, when the user 7 launches the application, he/she 
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password to be securely auui connection is 

... c and establishes a secure connection ^vitn it mecu 
corresponding server 3 ana estao ^ state^f-the-art 

both strong authenticated and may well as encrypted, usmg *n 
bote stron^iy auu ♦ t_ priced bv mischievous parties, 

cryptographic technology, and can thus not be cracked by imscm 

and may include, e.g., o*er j,,,^ 

„ tl „ w~ed in the system or not, thus giving uuu«*— 

T Lie Acoanv, — have arangeof possiWe statuses *ey - 

contacts, either by typing u> their systemra . tocmseare haceorfing 

, . ..,•„„ - search in a directory service, where u*=y 
knowiOorby.mnaUngasearchm ^crnplaryUlD assigned to a 

to various criteria, such as names, e-mail. « cetera. An exemp *y 
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user is shown in fig. 12(b). 



25 



ine in „ -„t; n n modules to the client, e.g., u> 

^ows deve.opers to add new typets) of lnt „e,«h e 

«-«ions with some remote service, muuau 
establish ^ commumcaoon sessions vn wMte stin benefiting 

aUow developers to integrate semces id ftotocol), which is 

^ty protocol preferably used by the cUent is SSH (Secure 



MSOOCID- <WO 006914QA1_I_> 



WO 00/69140 



PCT/SE00/00926 



21 



5 



generally considered one of the most advanced today. It uses the dedicated port number 
22. which is generally open on most firewalls. For communication sessions established 
by add-ons. the security is up to the add-on developer and the communication protocol 
that is used. All the infonnation specific to a logged in user, such as his contact list and 
inbox is cached and encrypted on the client machine, thus rmnimizhig network traffic 
for frequent users. The client is fully localizable, and can also be co-branded for 
specific operators. 

As fox servers 3, a exemplary server setup according to an embodiment of this 
invention includes a network of servers 3 and one database 13. Such a nunimal setup is 
called a cluster, and represents a small administrative structure of the systemmetwork. 
Each server 3 can be configured to run a certain configuration of services. Each such 
service is either some integral part of me systenVnetwc* of this invention or some 
additional service installed by the c^h^ Chtt ofmeb 

connection and authentication service that handles client 11 access(es) to the cluster 1. 
This is the single point of access into the cluster from the IP network, and the cluster 
should otherwise be considered as running in a trusted or secure LAN. By adding more 
servers 3 running this service, the whole cluster can be scaled to handle a potentially 
large number of simultaneous connections. Another set of services are related to users 
7 and handle information requests, propagation of ordine status and routing of 
invitations. Again, these functions can be scaled by addmg more servers 3 running 
these services. Finally, a specific service handles connections to other clusters, thus 
allowing users from different clusters and providers to communicate. Linking of 
servers 3 will be discussed below in more detail. 

AU mese services of a cluster 1 rnay mtera^ 
repository of all persistent data. This includes both user specific data, service specific 
data and administrative data. The database can be scaled, made redundant and as robust 
as the operator wishes, all depending on needs. An Oracle database may be used, but 
the system/network can beadapted to other types of databases. Thus, in certain 
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e^o^ofthistover^^^ 

„ database 13 of the user's cluster uidhd.— 

user 7 logs in- This mates >' pom"* "> an3 ' install"' client that is conipanble with 
the system/network without prclimimiy customization. 

a ^con M .(e.g..aseUcu4userf ro mthelis«) . TOsinfonnauonmaybe. 

.a^^ofterpubBcinfonnato. I»additio»,a function which becomes 
„ available to the selecting user 7 is the ability to send invitations to the select con»c, 
fromlhe list The nouon of uvvhauon here is a very generic one. and may use »n 
u^mi^standardproK^^ 

u 3 comparison, dealing the number of a person on a telephone is essentially sending an 
invitation (in the form of a telephone ring) to that person. 

is provided with a, leas, a few etanentary types of invitations as wen as me n«ess*ry 

consist of short t«t messages Ohey are the most simple type of ^ ^though 
*ey do not imply an aclmowledgeme.. from the receiving end; *™<^"» 

^invitations can establish a «aMime voice session between *e users; an^ 4) Web 
Web navigation of one user to reflect on the other.ttser's browser. 



BNSOOCID' <WO 0069 1 40A 1 



WO 00/69140 



PCT/SE00/00926 



23 



According to preferred embodiment of this invention, a noteworthy aspect is 
how invitations are handled on the receiving end In preferred embodirnents. 
invirations are never sen. from the sending u*r 7 directly to .1* receiving user 7 or the 
receiving user's client 11. To theconmuy, at leas, oneRS is utilized as discussed 

naghtnotbeonuneatall. The invitation is submitted to.the receiving user sRSthat 
runs continuously on the receiving user's user servers). The receWiug RS decides 
- ^mdowimuietavtomonacc^*^^ 
services. As a simple example, simple text pages might be handled in three different 

. >; fwferences' A user might choose to be notified immediately of 
o manners, depending on preierences. i\ e- 

toi<te uu«ifhei*no,<>nnne.,h*text^^ 

meir mobile phone (or some other pagmg network) (e.g.. 4). The same appUes for 
l5 aUototypesofinvitations. Thus a voice chat invitation might acroaUy cad up .a 
phone call, if thatservice is offered in me bacW by *e operas or .trtughtresoh^ 
a pure IP call, if both users arc online. 

This functionality become, melasma* useful as more services andnetworks are 
h^^mesys.nvnetwor.ofmumvention. ^^^^^ 
20 the client 1 1 to other type(s) of terminals such as smart phones and PDAs. ^^^^^ 
wi* ^ complesity. routing services offer benefits bo* for the caller (rnviu*) and the 
callee (invitee). For the caller it hides the messy aeuuu, 

^venperson^atauygWerttime. FbrmecaUee it allowsnmVher to control who 
L reK KhmVher»dhow.wiunou« having to <«sclo,ea»ypersonm information su^ 
* asphonenumbe^orne^o^addressestomecauer. Thus, certidn embodiments of tins 

-a ^o e fAfnRftrs7 which can be used to 
invention esseniiaUy define umqnc idenuties for users 7, 

n«:m«T all communications protocols/types 
communicate with other users and/or services, usin e an cowm 

available, while still retaining a high level of security and anonymity. 
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- * «^ server xnachine running all necessary 

— ----- ^ssrr^ss--. 

embodiments, multiple servers 3 are provided 
of this application. 

the cluster, 

^ fl« above the systemMewo* of *is invent U » 
-n,us, as can be seen from * ^ ^ ^ routi ng of 

on which service is hoolced up to it, hue ^fo each other, though the 

^ personal user information is «cmely held withm the 
<he cluster in which the user is registered. 

^ ^ *~ A e™>rte of this invention- 
Se, f or* beiow is a more denied description of certam aspect tins 

^ m hodinients of this invention, die 
bact-endis able to suppottauserbaseof «nso ^yhave 
^ yu ^^scalabmryasappbes«,sp^l» 

^eachclus^b^eenr^^-P^ iBscalabmty , but Uie 
whole back-end, being an interconnects of """J""* ^ of fce 

database 13 used; no other practical limitations 

throwing money at them, 

^ can be scaled very welKalthough not without limits) by 
this is perceived as a good design choice. 
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With regard to being robust, given an error tree run of the hardware, each 
server's uptime is preferably above 99.9%. and the uptime of ihe network preferably 
above 99 99% in certain embodiments. When exceptional errors occur, such as 
hardware errors, a maximum 3-5 rnin. lag is accepted EssentiaBy mese state ^ 
a server 3 is taken down, or breaks down, another server must automatically take over 
its role. Further, any single point of failure, such as databases or even hardware parts 
(suchas networks) are preferably redundant and automatically taken over by other parts 

if they fail. 

I, is often desirable that communication between clients and the backend be as 
secure as possible* within reason from a practical standpoint. The best approach to this 
is «, use autherricaubn when connecting to a client and to er^ aU n*ssages between 
clients and the backeod using strong ayrtography. 

to certain eLobodiments of this invention, each operator is able to ton a cluster 
(or clusters) * servers to serve its user, group. These distributed serve, clusters ™ 
prtferablyabletomteroper^m^^ Additionally, 
itis preferably flat sparntaing be prevented if pc^sMe. through the use of both 
preventative measures and coirntermcasures. 

As for the overall architecture, wherever standards fit the needs of the 
application design they should be used. Moreover, any add-on service that needs 
integration with the basic services of the backend preferably connects to it in a "plug- 
in" fashion. 

Turning to the overall server structure, reference is made to F.gure 10. Each 
operator runs one or more dusters 1 of servers 3. Each Custer 1 runs on a high speed, 
reliable and secure LAN. Reliability may be enhanced by having two (or more) 
s duplicate LANs, thus giving n-l/n redundancy where n is the number of duplicate 
LANs. Security may be enhanced by keeping the LAN in a locked room. The clusters 
1 are interconnected via a network connection 17 mat is preferably high speed but may 
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*i«t* that this does not mean thai 

Consideriixg the requite-*** <° *e badc-ena, • 

,„„ duster 1 including a plurality of server* 3 and 

*. ctasttr tacluae user ser*» (US) 1 _ ^ ^ ^ ^ ^ 

✓xr^-rt set forth below in Table us a 
servers (ICS)23. Setionn r . ^diments of this invention. 

3 in the Figure 11 cluster 1 have m certain em*o 



is 




^.'/om as needed. Ustens for 
Cluster Server » ^ T r«i« 
connections from remote ICSs. 

Subscribes user status at other 

clusters in order to maintain 
conect contact status for local 

users. Forwards local user status 
to subscribed remote ICSs in 

order to maintain correct contact 
status for remote users. Forwards 



Xilt> <WO _006914OA1_L> 



WO 00/69140 



PCT/SEOO/00926 



27 



If-- "-.v" .- .-" ': . :.'.* 
TION 



DB 



^Database 



US 



User Server 



EXPLANATION 



messages from remote ICSs to 
local US*. Forwards messages 
from local CSs to remote ICSs. 

- All data that needs to be 
persisted may be kept in a single 
logical database 13 per cluster. 

Maintains the user state 
for a given set of user(s). Keeps 
track of contact lists and blinded 
lists for these user(s). Keeps 
track of routing for these user(s). 
Forwards user status changes to 

interested CSs and ICSs. Routes 
pages for these user(s) via RS. 



n^i^m • aspect US. Mapsauser at 
- v;,v ; :i: * another cluster to a specific ICS 

^ ^;r.» • • .vjfr me Q£> associated with 

"the'user. Monitors the status of 

V 

the Servers in the cluster. 
^Readjusts niaps when a server 
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- .-r EXPLANATION 

^^^^TDLLNAME ^ . 

•Hon - 

S . r^c^vcr Ustews for connections 

re Connection Server *• 
^ fiom clients. Forwards status 

updates on connected clients to 

US(s) that is handling them. 

Subscribes on status changes 

^mUSsfortbecontactlists of 

connected clients. Forwards the 
status changes to the clients. 

Forwards r^S 60111 conneCted 
clients to US(s) and vice versa. 

between servers 3 need not 

connections between servers 3 maybe comecuon when two additional 

rf*;» e r»« the servers wish to interact, u«s a" 
software entities on tfte serve* 

10 as shown in F.g. w «^ J ^ ^ (local by a, fae< 

ex-npb of how the .napping — ^ J „ , usct SBtver crashes, is 
Mention. TOs n^g is dynamic su.ee * can change 
15 remove* or if a user server is added. 
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Intia . clust er serve* 23 are given cluster server ids. ICSIDs. Each ICS bandies all 
remote users 7 that have UTDs that map to a set of CIDs. It is (heUMF25'sioleto map 
UIDs of remote users to ICSIDs. This mapping is dynairiic in the same way and for the 
aarnereasor^as.telc^UIDu.USIDmappii.g. Each intra-cluster server 23 with the 
identification ICSID handles a set of remote CIDs (or pan of a CID). It is the ^^" s 
MDs which belong to remote clusters (Le. have remote CIDs) to ICSIDs. 



role to map 
This mapping is 
mapping. 



dynamic in the same way and for the same 



reasons as the RID to USE) 



Table 2 -Maps from UIDs to other identifiers 



MAPPING 



ClusterID(UID) 



IntraClusterServerlD 
(remote UID) 



ABBRE- 
VIATION 

CID 

usjd 

*.«vii* „ * ** 

ICSID 



NOTES 

* * " 

static mapping 

known by UMF. dynamic 
t moping 

"■ • 

known by UMF, dynamic 
mapping 



15 



UIDs areURIs. e.g., in the fonn^®^.«- The par, after me @ sign is rhe 
Cn>. This choice of UID is made for future interoperability and compatibility with 
other systems, i.e. SIP (which is'used for session initiation). 

The nature of the backend and the preferred robustness may call for a reliable 
ne twor k protocol certain emboduncnts. Also.thereuniren^.sforme.vsjemtr.y 
oall for a secure, authenticated, and/or encrypted communications medium. Thus, me 



SSH protocol running over TCP/IP may 



be chosen for all server intercommumcauons 
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• „*i«n Vvtween clients and connection 
v^^Tits as well as the communication between cu«i 
certain embodiments, as well other pictocolsinay alsobeusedtn 

_ Th ncP cldlled in the art will recognized mat uu*« r 

v^I SSH expos* abstract caUed V— 
altcnafivcaobodmients. SSHocpos ri ^tween two computers which 

can be authenticated and encrypted and winch can pro 

separate computet*. Many streams may* ope^on J* iOBemaythWc of » 

connection as an electrical cable, ana stream* 
) wires within the cable. 

Figure nitrates the way tn ys Each component 

to, components. aoo some of *» dependence between compo 
j^vanoustcsponsibiUtyC^in^^ 5 ^^ 

„ R , ,„ includes online sums service 31, user 
AsC anb eS eet,u«u 5 erservec ! (US)19mcludes ^ 

r— S*- 1 -* ^T^^ndesaUMP^notificanon 

„. broadcasting 57. authenfeaoon 59, I/O model P wl--hI 
, • « rv^tion and n^tenar«(0&M)serverw 
and failure detecnon 65. Operation an -^s^ornvmitoriagof 

servers/clients in certain embodiments. 

r- « the online status service 31 stores users' online 
am referring to figure 13. the ^.^ ^ 

requests to change the client's user's dnline status, tt bandies fatlur 
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US 19 to-hcUMFa hasallocatedforth. user aftertbeUS crash. andesubUshthe 
■Li — ———- ^co.uc.^se^cesssubsaibesu.-.e.^e 

«o read ». (a Winded Use n»y be a group in the eonac, Hst). The 0» » 

by either user. The RS 33 allows users to access and manage their touting table. 
Generic proxy(ies) 54, 55 resides on a CS 21or an ICS 23. This coEnponenf s 
responsibmtyU.oac.asadunfc.b^^ 

w^Th reside on USs 19. Each device handier 35 a, a server can receive message, pass 
pans of other user's 7 profiles that they have access to. 

connect „ the baefc-end, and is par, of the ftamewo* component 67 . Nouficauon 
broadcasting 57 ailows ba*end components to broadcast merges on several _ 

etannels Notification broadcasUng 57 is aUo panortr*frarnewo*con^t«7 as 
cnanneis. koui •,„ « ^ not in itself be pan of the system, 

illustrated in Figure 13. Protocol compiler 63 need not P . 

gene i^for).Tl«pro.oco.e^^ 

^ or server and a serve, into code for bo* client and server watch unp« 
Ibacrandforthbetween the cUentandtbe server. I/O model 61 handles thread 
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. • *~a t« the DB 13. The function keeps the mapping oi us 
,0 sdversforCSsandlCSsCU^rServer a env ironrnent in which to write 

services, which transparently (to the services, 

• 4, locates resources which are external to Ac cluster to 
^ balancing senm* 41 allocates res ac , ientllrn ay 

^ fATVfir , which are not unplemeniea wimm 
setup and management as well as oau. 

j_- to change certain sellings of the 

^.taWstrative tools allow system admimstrators to Chang 

~~ «e Thev are responsible for notifying tul components 
20 system, add new users, etc. Tney a="l' 

cluster of changes to settings that affect them. 

^ fi c defined by service creators) objects m me 
which are user-defined ^i.c aeiiuw« 3 
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Responsibilities of framework 67 include the following: 

A. Provide an environment which efficiently handles matters such as I/O, 
timed alarms, thread pooling, message broadcasting, database connection 
pooling and logging, hiding the complexity from the service creator. 

B. Expose abstractions to service creators which make their life easier. 
These include abstractions related to I/O, the database and data stored 
therein, alarms, message broadcasting (notifications) and logging. 

C. Perform caching of data within the data abstractions supplied. 

D. Reuse existing data abstraction object instances when this is efficient 

E! Supply a non-ambiguous method of specifying a protocol description. 

F. Implement a process wWch can, given a protocol description, output 
code which implements the details ofhow to encode protocol requests for 
sending them over the wire and how to use the I/O primitives supplied by 
the framework. In essence, this process hides from the service creator and 
the client implementor the fact that the client using the service does not 
run on the same computer. 

G Uniquely identify instances of services and supply a registry of these 
so that connections may be made to previously existing instances. 

H. Hide from service creators the fact that when their service 
communicates with other instances of the same service or instances of 
different services, these instances may be located on different computers 
within the same cluster or even on computers within remote clusters. 

I. Ensure authentication, security and integrity in all c<Mnmiuucations so 
that service creators can always take these for granted. 
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The threading model exposed » services in the fiamewo* 67 is what to on 
occ^onbeen tennedaxen^l^nt An apamnent is defined as "mecontext a 
.eoaMiscalledm-.The fact that the tenant is oiUy^tmgth«apa«nent>«a»s*ata 
tenant nay not always be called in the same context fix. on the same thread) but since 

tenant will never be caued in more man one context a .be same tone (i.e. no more than 
OTe tacad will ever be active in the code owned by.tta tet»m>. Services are •«« 

T^^work^ajK-olrfdn^inttwhU*.^ 
» . maximum. These threads are then reused when wo* ^* be oo«. Each thread 

ta,,^ watts until a thread is available, hands it me assignraen. (. desert- 

ttaeadffcishes. itnodfies the tameworl, wh^ then reran. 0 M 0«ad«»*e.vaUabl. 
aae to the thread pool. The reason for usin* a thread pool is d»* performance 

as more threads are aUoca«d • domn separa« j cb S .vm.oan^Csys«n 
aepenaent). This means that we can only have a — -.«^ — « 

30 a time, but we have a number of Jobs that need to be concurrent 

problems. 

As for VO 61, the framework 67 preferably uses an implementation of the SSH 
standard protocol for an communications between clients and serve*, between servers 
* within a cluster, and between servers in different ctasters. SSH provides 

auu^dcation, encrypt . 
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in the framework. The framework exposes an abstraction equivalent to an SSH stream 
to services. 

With regard to connection requests, an instance of a service in ^e framework 
only exists as long as a stream is attached to it The process of attaching a stream to a 
service will now be discussed. Streams are opened with two explicit parameters and 
one implicit parameter. The implicit parameter is the UID of the user opening the 
stream, which we will call the source UID. The explicit parameters are me name of the 
stream which wc will call the "stream type", and a UID which we will call the 
destination UID. This UID might be the UID of the user opening the stream or the UID 
of a different user. We previously nientioned that one of the rxamework's 
responsibilities is to uniquely identify instances of services. We can now define what 
constitutes this unique identification: it is the type of the stream mat is connected to the 
service and the destination UID as defined above. 

When creating a service, two main parts are exited: an object to wMch streanis 
can be attached, referred to as a stream connector, and an object which knows where to 
connect connection requests, called a locator. A part which implements the actual 
functiotiality of the service may also be M'u^^^^^^on 
the framework registers all the locators it knows about under the name of the stream 
type(s)«hey handle. Any given locator is registered as the object which knows where to 
connect connection requests for streams of a certain type or types. 

We can now explain how a connection request may be handled. When the 
frameworkrec*^ 

UID v, it finds the locator registered for stream type X and passes it the connection 
request. The locator checks the destination UID. Y, and based on what the UID is, it 
does one of the following: 1 ) creates a new tenant and a new stream connector, attaches 
the stream connector to the tenant and connects the stream to the new stream connector, 
and registers the new tenant as "the tenant to which the service for stream type X and 
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-same" instance of a service tcshare »««■ 

^ — •»^-^ te -- a, *tl^-- caninfactbe registered 

separate protocol, spewed m a protocol oes P C4+clflSS which 

. . we can step back and see the whole 

Now that we have covered (he details, we „ ^ 
.. (nr tvoes) which is the type (or types.; 

destir^onUID^Tlieservu* creator ,^«o a stogie instance of the 

service or always to a new instance. 

^_ it siskins for the stream to be 
Up until no* we' ve assumed that the enttty that » _ 

„ , . ,h,t services can themselves connect stream 

25 thesoiwUTO.deso^onUroanatJP n H*tract stream I/O between 

cuents and servers, and beween servers and servers. 
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At times it may be necessary for an instance of a service to send a broadcast 
mcssage (referred to as a notification) to "all interested parties" without knowing who 
*«. parties are. The framework supplies a method and function 57 for doing this, as 
well as for listening to notifications that you're interested in. The abstraction that the 
framework supplies ,o services is as follows. A service can send a notification (wiuch 
is simply a binary packet with arbitrary data) onto a specific named channel. A service 
can listen to specific naxi^toU aim wffl^^ . 
notification arrives on one of these channels. 

PDL U short for Protocol Description Language. ThU is Ok trameworto solution 
for a non-ambiguous definition of a protocol between a client and a service (when we 
talk about clietns in this context we are also tdWng .taut service which open up 
streams). The PDL compiler 63 is a software tool which takes PDL as input and sorts 
out much code* both on the client side and on the server side. On the client side* it spits 
out a COM DLL which implements COM. interfaces specific to each protocol winch 
,, w c ,ien. aoolications tousc.be protocol as if it were a normal COM object. On the 



out a COM DLL which implements COM. interfaces specific to eacnprowwi — - 
allow client applications to use the protocol as if it were a normal COM object On 
server side, it produces two main things: code for services to act as clients to the 
pto^andec^forservicestor^^ The code for implementing a 

service is split into two: an object which allows the service creator to call back to the 
client as if the client were a C++ class residing in the same process space as the serv.ee. 
and a C++ class which is purely abstract which the service creator must inherit from to 
tapfcment the memods defined in me protocol. These two parts are a high-level enough 
abstraction that the service creator car, if he chooses, ignore the fact thatthe underlying 
I/O abstraction is a stream (he can even ignore the fact that there is any I/O going on). 
The only concession to complexity that the service creator has to make is mat all calls 
m asynchronous, i.e. if he wan* to send back a "return value" to the client he must do 
so through a new. separate method call. Note that although PDL and the PDL compiler 
63 are supplied by the framework to ease tie painof writing protocol stacksbyband. 
me underlying stream abstraction is mere for the service creator if he/she chooses «o use 
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to poke a bit at its interior parts 
to change its behavior. . 

specific ot a service, either by the 

• Us ^«wm ta c^ te ^un^^^^^^ ecachiogfliedaB 

service creator he^orbyasepa».e^ i^P^v^e****"**" 

, fcey rcP — t if *ey choose «o do so. ^"J^ ^ by te UJD which W 

owned by a specific user. The registry ^ ^ OT reu5 es . 

c ^^.U.Ue^c^^^ fei ^ bytod ^ 



aspecffic^ceofa.ervice^des^ ^^effcedf^ 
aestinatiar. UID. The user mapping <"~ a riven UID arc locate. Ka 



20 



25 
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L-forwarding prox.es torn or* stream to another. 0 ,C*21. f ^.--- f M- 

* hack-end. When the generic proxy gets a 

' arc supposed to have access to in die back-end- wnen s 

,/7/v-v UlD=z). it will accept it then ask its 
connection request (type=x, src VlT^y, dst UiJJ-z), * . 

nafrrrneters (x. y Z)» Since the mternal TJMF is being 
t framework to open a stream with parameters (x.»V- * 

i *- tic i o «Tvicine destination UID z, or 10 

^ed on CS S 21. Uus W U1 open a stream to tte US 19 .emeus* 

cluster user z resides on. On other server 
the ICS 23 which is acting as a bridge to the cluster user z „ 

- nsed in the same way. The difference 

tvnes(e£ US and/or ICS), generic proxies 55 are used in tne s 

20 connected to. 

roliti » g .oglc wm probably end b y deciding to send the message ,o user B rouung 
16 *^ . . rp>e p5ves the message from user 

. • «... us^. 3) User B's routing service 33 receives me ui 5 

service on user B s US), us probably 
A's muting service, and ^ on it (this logi 
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e.g.,n»y^ i« fl « RS 33 for a given user, both the 

stored to the recipient -.menage box, b) **« *n — ■• 01 » 



receiving user's client 



To oreven. spanning and denial-of-servic* anac*, the sendtng « 

recipient usages may not be allowe tatiswhatt he client does, i.e. sends 

5 cheat wan* to send .he same message to 15 users, that ^ 

i s rt m« This means that in such embodiments the servers 

perform as well as making it time-consummg to send message 

^^..w*-* JL^.; software component, caUed 
device (eg. aphone number for a phone temnnaV). 8* P° ^ 
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. m a fnr the device handler to pass them 

usages to the device handler for handbag, and for 

back. 

* t _ H«^de what to do with a message) 
Routin- logic (i.e. which choices are made to decide *nai to 
R ° ° & v pc in a special-purpose pseudo-programmmg 
^ be implernented, e.g. by an RS 33, » a ^ ^ ^ non . leaf 

language dubbc^^ 

Vm> made on a number of parameters, ^""""e 
can be made on a ^ ™m of me database, etc. For each user, 

- .-a time and date, the state of certain pans or me 

routed, the tune ana oate, ^ ^ 

several different ^ defined bv the client 

s when the user is at work, one routing profile forwnen 
user is on-line, etc. 

. - ... user to a session* accepting an 

For session initiation (i.e. invinng another user to 

. «• „ . ,„v*« of the Session Initiation Protocol Olf . 
invitation, etc.), in certain embodiments a subset of the ses^ CANCEL 

v -t ThB STP methods used include, e*,tte INVITE, aulw 
PD maybe used. The SIP methods u ^ niDneSchoo i e riR 0 senberg. 
„ methods. S,P is explained, for example. mHandley/Scltul 

"SIP- Session Initiation Protocol," Internet Draft. '"' <:rMt ^" S ™/™^^ n ^ e These 
suff.ee for users to initiate conferences and urn* ottter 

Engtaeenr^TaskForce, April 1998, ute disclosure of which .s hereby » orpo 

herein by reference. 
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^heused in this invention. In certain 

, ^p^ i nv i « a ti O »-«<!»««.^ ,alOT - Kiay,e,e - )0 
^ may to added if necessary. 

,~n<mse to a message sent by a user- 
auto-reply Ar. automaoc response to a 

/ >; IKVTTE request header. 

station- Aiepiyx 9nSIpINVrr E reply header, 

reply of the message is an SIP iwvu 

e «it once the invited user has 
- . : 'V s J - ; 'a session setup request sent once me 
|Dvitat^.^.Ase^ «^ Vsr p AC K request. 

• set^r^tj a^topamapate,e.g. a ^ 

setup-reply 

•icancel- V--..V '. ' • . 

;.request ' - ■ . ' "V 

^i^^ Sentwton^asession.alaSlPBYE. 

bye-request 
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A user's "inbox" is part of the user's routing service 33. The inbox receives any 
kindof message When Bus havens, it send.ioun^cu of 4e.pessage.o4. 

In certain en*odtaen«s. the e—ty 
operator wffl periomaOly chedc for very targe inboxes <i.e., large yo.un«>. notify me 

„ he/she does not ciean it up, and give : ft. user 7 a deadline before w M ch «o fuush 

Moreover, the inbox can hand* .he sending of receipt of storage if the message . thus 
marked, 

Rgne 14 is a flowchart fflustrating hov, a first user («.g.. user #1) can establish . 

«, using one or more cheers of menetwori. The first and second users may be 
^ed to the same Custer or alternatively «o different dusters of the networK. 
Moreover, the first and second users may be assigned to the same user server (US) 19 

n^ssageHsteplW Toe firs, user may loo. up the second user, UID on the first 
^ JnLt Ust (note that the UK) need not include a ncwo* address of the «cond 

■ M ^^^wl*«««---^'-^ Atmefrrstusersrequest^ 
raessage (step 155,. TheRS may. for example, ignore me message ls<e P 157]. but more 
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a tec's RS 33 at the second user's US 19 (at the 

^oradrKer«tclus.e t )lstep«9]. — - ^ BB-1-by *.— — *» 

a.essage and runs * incoming room* lope P g^ ^^te, grouting 
^^do^-h^ 
, Vogofmc^^ 5 ^ 33 ™'^, _ ^ofcerpaging network 
^SMSn^gc^^^^^^^onUne) [step 

,o ,671, and/or 4) deliver the INVITE messag ^ ^ m) . 

caseof^^^vsermay^^ to ^ onof tneTNVTTE 

Od^e, the second user may .gnore. decUne 

^asdiscussed^l^^- ^33 is to act as a too. 

^^senaingpag^.a^on^^^^^,^ 

^ecnenserisatherc^uu,^^ J^^ca.nngpsrt, 
^areatt^phones. ^^^LcaUedp^^^ca^ 

f , tMM) le with tefete.ee to Figure 15 **S™ 

33 Cat! wants u.askAt.neandWai^toj n ^d start by ~ 

wo md«a I tb yD s m gMscUen«nu>u,v ltt Ann^ ^ w 

a^oninCa^Sessionservice ^ -pB| ^ <i *.-*-'- 

encode the address of the sesston Ce.g.. =»1®P 
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SIP INVITE message [step 73] and send that to Anne [step 75]. The INVITE message 
would be directed by Carl's RS 33 and Anne's RS 33 in accordance with how the 

on-line the INVITE message would be directed to Anne's client (e.g., Anne's PC). Anne 
then determines whetherto accept of decline the invitation [step 77]. If Anne decides to 
accept the invitation, this would cause her client 1 1 to connect to the session encoded in 
ihe INVITE message [step 79]. If Anne decides tondecline, she may either ignore the 
INVITE message [step 81] or may send a declining message to Carl's client [step 83]. 
To invite William, Carl would use his client to add him to the session. William would 
receive an INVITE, accept it in a similar manner, and join the session. 

For purposes of another example, consider a PC to phone rendezvous (e.g, see 
Fig. 4). Carl (user A) is at his computer (e.g., PQ and wants to voice chat with Anne 
(user B). Carl chooses this option in his client 11, which then sends an SIP INVITE 
message to Anne as discussed above. Anne, however, is not at her computer Q*. 
Anne's client 11 is not online). Upon receiving the message. Anne's routing service 33 
notes that she is off-line but that she has asked that voice chats from Carl be forwarded 
to her GSM phone. Thus. Anne's RS 33 sends the message along with the phone 
number to call to a device handler 1 0 specifically created to handle this kind of INVITE 
message. The device handler 10 sets up a call leg to Anne in an external voice gateway 
12 that it is affiliated with, sets up a ternporary number in the gateway that will connect 
Carl to the call leg already set up to Anne if he calls it, then sends back a reply to the 
SIP INVITE message that tells Carl' s client 1 1 that Anne is temporarily moved to the 
temporary number just set up. Carl's client 11 calls the number (using some IP 
telephony system), hears a ring, and then Anne answers to complete the rendezvous. 

As another example, consider a phone to PC rendezvous. Assume Anne wants to 
use her GSM phone (i-, Anne's client) to call William. She dials his phone number 
(this kind of double mapping is necessary since the phone system only supports phone 
numbers as addresses, not system/network UIDs). A voice gateway receives any call 
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• , a- n Anne's call setup request. It contacts a device 

dialogue which William decides to answer. 

ohonetophone rendezvous. Assume thai 

William wants to call Carl. He p.cKs op ^ „ HatezTOUSCas e above except 

t • :~ imc t*s 33 notes that tie is ou"**»» 
5 *«.-»*"'- , « HVBE ^eaadthepbone^beba, 

spedfiedtowbenbe^^*^ ^ troto device handUrwM* 

original d» WVIIB. *• back to *, vo.ee gateway — 
20 specified number. 

• . facilitate things Bke tao«ing statUS 

components: Online status service 31 ana o 
25 service53;andGontactnstservice43. 
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Figure 17 shows the data stnictores to Ihe con^ 

server in the same maimer. Both of these data structures can be considered volatile and 
are kept in memory for efficiency reasons. The useTs online status is subset 
the responsible US 19 by CS(s) 21 that are watching the user as someone's contact. The 
CS that is connected to the user's client can update the user's online status (through the 
user service/user service proxy), and his/ber contact list When a US 19 gets a contact 
list request on a user mat hasn't been load^ it loads uie user data trc^ the database. 
The user data is kept loaded while any CS 21 is using it- When all CSs have released the 
data, it can be unloaded from memory. The data may be kept in a cache of some sort for 
a while from where it can be quickly loaded. The version attributes of the lists serve the 
purpose of being able to know when to update the cache in a CS by checking the 
version number of the data stored on the CS and c^n^ it to me verdbn ir^ 
the data stored on a us. 

In the contact status service 53 on a CS 21, each connected user has a contact 
list. The contact status service subscribes to the online status of each contact that it is 
watching from a corresponding user service on a US. It is the user service's 
responsibility to filter out blinded users whe* sending status updates. Figure 18a shows 
ihe data structure stored for the contact list service 43. This information is stored in the 
database 13 and retrieved on demand. Each user has one blinded list and one seeing hst, 
one of which is active at a time. If the blinded list is active, all users except those m the 
blinded Hst can see this user's online status. If on the other hand the seeing list is active, 
only users on the seeing list can see mis user's online status. 

Referring to Figure 19, in order to access the system/network of this invention, a 
userVmnst&stlogon. Figure 1 9 illustrates an example of the message sequence when 
> a userUa logs onto the system. When the CS 21receives the authentication request jt. 
first checks the password for validity. The user may have been unregistered, etc. Then 
authentication is performed. In the example, the user's UID hasn't been used before. 
The CS must therefore ask the UMF for USID. The UMF 25 selects an available US 19 
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m_i f a«i t ttd The CS now sets Ae online status for 
with the least load to be responsible for tbaiUID. The^ 

wimin ■ -t%1 _ ,. nnt act list. In the example Ui has one 

U, on ^ responsible US 19 and retrieves fee contact Ust. in ^ 
u,onaKiwF« ♦„„ e tte fetched from the correspondmg 

contact, namely Bi- The status for .ha, contact must be fetched ft £ 
US of tot contact. After that, CS subscribes to B,'s online sutus. Tne US 19 of 

enact is off-line until they Kerive astatus message. 

. »*.,^sa»e science when a oseiUi logs off 
Figure 20 shows an example of the message sequc ., 

ITm w*eCS21 sendsalogoff message » the US WresponstbleforU,. 
att baekend.Nowtt«CS21se n asa g ^ 

The US sends status message to all subscribers, saves the user da 

subscribed. *^»— - "^^ Bl! ^«**---li 

is being monitored. 

^-^^•~**~^^?„taHl» one user 
Tn^yacaou^userswhoareorarer^tassigr^ftesa^clusw 



contact Est 



another user ot tne sysieiu, adding user 7) to 

, «^™>^™"^Z™7*^ boouuenU-NoteUtat 
vAenausetA^userB.ohisbur^edl-t.^Bdoesnotg. 
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this was done. The idea is that user B should not know he or she is on user A's blinded 
list- Figure 24 shows an example of the message sequence when a user inverts his or 
her blinded user list This sequence is similar to the one when a user is added to a 
blinded list. 

5 Set forth in Figure 25 is a summation of database 13 operations needed for the 

contact list functionality* As can be seen, in preferred embodiments, the user server of a 
given user 7 is responsible for most actions relating to contact list functionality of that 
particular user. 

The session service 37 handles session management. The user that initiates a 
10 session (i.e. creates a conference or initiates file transfer) owns the session* Other users 
7 get invitations to the session which contain directions on how to connect to the 
session. The owner of the session can invite other users (through the normal message 
routing mechanism), kick users out of the group, mute users so that they become 
observers, and/or end the session which causes all users to exit the session. Entry into a 
15 session is by invitation only; and mis is preferably handled by the session management 
server keeping a list of users that may enter the conference. The owner of the session 
adds to this list when he or she invites other users. 

For every user 7, a certain set of data is stored. The data is kept in key/value pairs 
call properties. These can be global for everyone to see, private only accessible for the 

20 user him self or it can be access controlled. Figure 1 8b illustrates a data structure for a 
user profile according to an embodiment of this invention. The user property service 39 
of a given user controls functionality and storage in this regard. Moreover, a "find user" 
service may be provided in certain embodiments, for enabling clients to find user IDs of 
other local cluster users by searching on their user properties (same properties as in the 

25 user property service 39). 

For each cluster, there will be a single scaleable, robust, relational database 1 3 
which contains all of the data the system uses which must be persistent. For smaller 
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For larger setups where there is a very large number of users and a greater S ^*^ _ 
a cluster of high-perf onnance rea^fromandwntntgtothe 

5 hot-swappable RAID setup. In this way. any level of redundancy can be adueved as 

bunded list for each user. The contact list is a hierarchy of groups where a user can be 

for ^ Cerent routing profiles for each user, along wUh da* which descnbes wtach 
£2.*— Bachus^-slnbo.is^.y^^d.^se. 

Possible transactions include ADDED, DELETED, DESTROYED. MARKED READ 
and MARKED UNREAD. The DELETED and DESTROYED ttanS ^ I *°*^^^^ 
-h*. as regards the server system (Le. they ddete the message 

. transactions for increased flexibility in the client (e.g. the 
but are kept as two separate transactions for mcreas 

^sameend-user experience). Moreover. aUsenings for back-end serve. are. toredtn 
& dacabase in certain embodiment, as are togs from the system, bo* logs for 

do with the client's location, e.g. firewall settings. 
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Turning to scalability, let us define a mathematical model for use in determining 
scalability. Reference is made to Table 4 below. 
Table 4~Symbok defined to use to ^ 

SYM- DEnNlTlON 
BOL 

A Set of all users. 

N ljAfl,i.e. total number of users 

n Number of online users. 

B(tt) Contact list for user u. It is given that B(u)C A Uj .- 

UU ) Blinded list for u. All users but users in L(u) can see 

u's online status. L(u) £ A 

P(u) Users privu^ 

* : p(u) are allowed to see ^i o^Bt^ ^y^^(^^l% 
V >(n) or Uu) are empty) V^J 

x ••' ••" " . ' 

Ncs Number of connection servers. 

Nus Number of user servers.. : .• .• . 

Number of user regions. The user space is divided 
into N R regions. Each region has N/Nr users. 

.v ~ ; Average number of contacts in any given c<mtart,fig I 
t ,".' Assumed to be a constant j -f- 



N, 



R 



• t 
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Average 
Assumed to be a constant 



number of users in any giveublinded list 



, „ much load the routing service causes on 

What influence N and n have on how n.cMoa^ ^ ^ 

USs<CSsdonotpar^ 

smgl« message c- determined, is a constant, ,1.; and 4) The 

number of messages mat need to be routed per us per 

Given these assumption*- the routing service causes load™ ^ s wlBC ' 1 

■ ' 7 ? 



io order 



15 



20 



Since 

US constant as n increases by increasing Ncs. 

^ n ^vers 21 what influence N and n have on the load 
With regard to connect serv^ 1 ^ ^ ^ 

i^ced by the contact Ust serv.ee on each CS may De 
foUowing for simplification: 

. Onuneusersare^allydistributedonallCS, The nun*, of 

connectedusers oneachCSisn/Wcs. 
• All contact lists are of size/. 

^.erstoB^^use.r^BW.e.c.Asacons^ce 
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. ihc number of subscription messages from USs per subscribed contact 
per time unit is also constant. 

• Following our last assumption, we assume-that the load on a given CS 
caused by events from a single connected client is constant, denoted by 
ol Additionally, we assume that the load on a given CS caused by 
subscription events from a single contact, is constant, denoted by &. 

• The connected users on each CS do not have any mutual contacts with 
other connected users on the same CS. Further, no connected user has 
a contact that is connected to the same CS. This is the worst case, 
usually connected users share some contacts, i.e. some two connected 
users x and y will be interested in following the online status of the 
same contact z — users ;candy share the contact z. Given this, any CS 
has to subscribe to f nJNcs users. 

Hereby we can see that the load caused by the service on any CS, given these 
assumptions, is of the order 



As a. +fp is constant, it is clear that by adding more CSs to the network as n 
grows, the load on each CS can be kept constant. Hence, the CS part of the network is 
scalable. 

Most likely some contact sharing will occur on each CS, decreasing its load. 
However, the contact sharing will decline as N grows. This is clear because connected 
users can have contacts from anywhere in the user space A, and the chance that any two 
users share their /contacts decreases as A grows. Experience shows that in systems like 
the instant invention, users will group in cliques. In a clique, each user will have nearly 
all the others in each of the other users* contact list. (Note that the mathematical 



<WO 0069 1 40A 1 J_> 



id 



is 



20 



PCT/SEOO/00926 

WO 00/69140 



54 

definition of a clique is stronger. In a rnadiematical clique, each user would have all the 
other users in its contact list) The chance of contact sharing may be increased if users 
are connected to CSs in such a way that they are likely to-be in a clique with some other 
connected user on that CS. The likelihood may for example probably be increased by 
connecting users to CSs by their geographical position. 

Similar to the previous section on connection servers, what influence N and n 
have on the load caused by the contact list service on'each US 19 may be of interest We 
assume the following: 

• C^eusen and users that are 

equally distributed on all USs. The number of users on each US is 

nINvs- 

• All contact lists are of size/. 

. The number of events from CSs per user per time unit is a constant As 
a consequence the number of updates to subscriptions that need to be 
sent to CSs per user per time unit is also constant 

. The load cm a given US caused by events from a single online client is 
constant, denoted by 9. The load caused by subscription updates on a 
single user that need to be sent to a single CS is constant denoted by 

-. The network is large enough such that N„ >=f- No contact sharing 
occurs in the CSs. Thus, subscription updates for a single user have to 
be sent to/USs. This is the worst case. 
The load the service puts on any US, given these assumptions, is of the order 
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As with ihc connection servers, by adding more US: to the network as n grows, 
the load on US can be kept constant Hence, the US pan of the network is scalable. 

As for reliability issues, a cluster 1 is an asynchronous, distributed system 
5 including the following discrete components: 1) Connection Servers; 2) User Servers; 
3) User Mapping function; 4) Database; 5) Internal Network; 6) External Network; 7) 
Clients; 8) Intra-chtster servers. We assume that the Internal Network and the Database 
implement their own redundancy and achieve close to 100% uptime. To meet its 
reliability requirements the C ommuni ty Server Network therefore has to be able to deal 
10 with the following types of errors: 1) client failure; detected by CS, affects only the 
client that failed; 2) External Network failure, loss off coiuiectivity with one or more 
clients; detected by connection servers 21 and clients/corrected by throwing away the 
Session State on the server side and establishing a new connection from the client; 3) 
Connection Server failure, a hardware or software failure that leads to the loss of a CS; 
15 detected by connected clients, and corrected by clients by reconnecting; 4) User Server 
failure, a hardware or software failure that leads to die loss of a User Server; detected 
by connected CSs and/or the UMF, and corrected by removing all mappings to the 
afflicted US from the UMF and broadcasting a request to all CSs that they selectively 
flush their UMF cache (affected CSs then throw away any session state associated with 
20 the lost US 19 and reconnect to other, newly assigned USs), 5) Intra cluster server 

failure; same case as US failure; 6) User mapping function failure; detected by Uss 19, 
and corrected by the USs restarting the UMF 25. 

With regard to logging, auditing and/or traceahility. all relevant events in the 
system may be logged to the database 13. These fall into two main categories: events 
25 that are of interest to the administrator, and events that can be used for billing. For cad 
event, the date and time of the event are stored, as well as which user was responsible 
for the event Each event has a type, and may possibly have some additional data 
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. mttA& tough the client to server protocol by a 
«tto^*»rf to it. When logging a request made tnrougn u 

attached to it. wnen 0 &»s n ^^daswell Administrators may use 

the IP address of the user might be stored as wen. auh 
usertoaCS,theiPaaares fl ^^ a dnUdiwiivet^iitt« 

• i oArr,; nitration tools or simple SQL queries w uo «^ 
special administration too simp ^ emDt edto authenticate themselves more 

reason for the crash), Coinriiunity operators can use whatever mean 
data from the server for billing purposes. 

. . ^^^^^^^^^^^ 

of «« reg is^« P r<^<he»6«r«lecU"P h e* te con.ee*. 

fci«/hefuserID and password to the cluster i caui uu 

connects to a CS, it sets a copy of the server ^ ^ ^ certiflcatc , ^ 

. . ™,Mir fcev and verifying its authenticity, the diemauin 
saver spnbhckey ana vemyins .^f^Hoaasfornserauthenticarioii. 
2Q cryptographic cfcOknge-response, m a similar fashion as 

tv,* <:<5W 2 0 twotocol is used in all clients-server 
arc secure. The SSH 2.u prorocoi . validati0 n and data 

25 ^•^^^^^r^^strear.Asforserver- 
i*; 1- c w channels each of which is separate vuxuai »u 
cpenu^rnulnpleSSHchanr.U ^ ^ ^^eenUser 

server communications, the network ^ ^ ^ 

Servers 19, the UMF 25 and Connecuon Servers 21, is assume 
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ftom unauthorized access. Neither authentication nor encryption is performed in 
co^nurd cations between USs in certain embodiment of this invention, the UMF»d 
CSs Cotnmumcarions between CSs 21 andUss WnlayusetheSSHJ.Opn.tocoL 
Server authentication, user authentication, data integrity validafion and data encryption 
are disabled for such connections, so only the ^nroltiplexmsiaeiHtyof SSH need 
tensed Communications between Comotmity Operas are r«fer*ly encrypted, and 
public key cryptography used to authenticate both ends. TV* SSH 2.0 protocol may be 
used for suchconunumcauo^andmutital server a»n^cafion performed by means of 
pubne/privatecryp^hy^dke^ 

hardware, includmg hosts nnining nte database. 13, CSs 21, Uss 19, theUMF2S, 
network routers, bridge,, network wto g and any odw panK of a ctater 1. needs to be 
physically secured from unaumorized access and tampering by the Commumty 
C^erator.The aecurtty of theerfre system 
conmrornised.si.^anypartofme^ 

such as CS-spriv^ keys, ^-sprr^iitfc^onandcom^^onsac. More 
Moreover, it is noted mat Connection Servers lie on the bc^mdary between me 
nnsecuredsoter^andu^sccurel^ 

r^y see all connected client" traffic in clears and also contain their own prtvate 
keysincleartex, Because Connection Server, are open to connections from the 
secured Internet and handle aU client communications, they will function as firewalls 
of sort Each CS 2 1 has two network interfaces, one to the unsecured Interne, and one to 
the secure intranet There is no routing performed between the two networks. Incertam 
embodimeMs. Connection Servers are able to log every connection and connection 
attempt. Log entries include such information as the dan, and time of day of the 
, connection attempt, source IP number, user ID usedfor any authentication attempts and 
.he reason for authentication failure. For successful connections, Connection Servers 
additionally log the time of disconnection and the amount of data transferred in each 
option. In certain enuHxSments, it is prefened thatmeCommuruwOper^rfflBrs 
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hacking and to keep track of any tacking att=mp*. 

, „f the back-end are preferably stored in the DB. 

user's information into the database. *~ 
from the command line, for use with programs etc. 

. t~ 9nso 7 is able to create new profiles, delete 

Sn^routingbbasedon the user scmrenjr ^^of 

p^e, the other user cou>d * routed lo an ^ QSM ^ 

«,^ C chall be available: text, 

20 voice, and video. These message types shall 
messa ge <STmEn^^^ 
otherthan^sy(N^^^^^ 
of messages they are repositories for. winch types of 
and which types of messages they can send 
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TableS. 

Device ,- Repository for.. 

these message 
types 

\ . ; 
* *• * 
■•t • • 

Inbox STM.NM 

client 

Standard 

phone 

phone STM.NM 
Auto-replier 
'vVebpage 

Pager STM.NM 
Email client STM, EM 

Voice VM 
mailbox 



Endpointfor 
these 

conversation 
types 

Text. Voice 
Voice 

Voice . 
Text* Voice 



Can send 
messages of these 
types 



STM 



STM 
STM, EM 



Fax machine 



STM. EM 



It shall be possible to create additional devices as needed (e.g., conversational 
agent). As for the devices above, the autc-replier device is basically a device which the 
user 7 can set up to reply differently to different users, using voice and/or texL This 
device is an integral part of the instant system/network. In the case of voice 
conversations, only the client 1 1 is able to initiate a voice conference between more 
thantwousers. The inbox receives all STMs sent to a user, as well as notifications of 
delivery of messages (e.g.. when the system routes an email to the user's fax). The user 
can specify which types of message deliveries he wants notification of. The client can 
give access to the inbox, and notify the user of new messages arriving in the inbox. In 
the case that user A tries to contact user B using a mode of communication or message 
type that user B does not support (i.e., user B has no device capable of participating in 
the mode of communication or receiving the message type) the system shall notify user 
A of mis. 
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v ^wnees can handle tens of users per 
As for text conferences, such conferences can nanu 
■ . _ «r P f«ablv has ownership rights in 

coherence. The user who Mflaies the ccrfe^prcf^bly^ ^^ 

-conference which gives MW erto*ui W «»inv-eu^«othecorf«nee,b 
the conference, »«"^ with renard to voice conferences, 

such conference, - pretax hand* no iess 0*n u* nun^r 

confer prefen^i, has ow^n^m^ ^ ^ ^ ^ 

to sam c web page a, hun/he, In C ° ^ Mlby ^i^tors 

education), ^toerftoferweh 

conferences may make it easy for It ^ also make U easy for the user 

^ invito users to this conference, iisiwu*"^ 

conference or a video conference. 

• -« r «-*7 can enumerate the contents of 
^ voi ce mailbox through *e WUcaUon (.,„ s^"-* 

etc.). A^'-^^^-^^^^^ta.* 

— •^■^^''•^L ' bepossibl.for.he 

forward different message types to the user's e-nuul box. T»e us 
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address which is specific to the system/network of this invention, this being done so ihat 
die system/network can route email, and also for anonymity. 

The system/network of this invention is preferably designed to be accessible via 
many different clients/users. The functionality of the application back-end can be 
accessible from any client (although bridging work may be required). Several clients 
fall within the scope of the application. The "full cHent" features text and voice 
capabilities, and is a standard GUI program with a persistent connection to the server. 
This type of client is the one we are usually referring to when we say "a user shall be 
able to do X", i.e., this type of client is the one that allows the user to do X. Other 
clients are either stripped down versions of this one, or very limited clients. The "thin 
client" is a stripped down version of the full client which lacks one or more of its 
features (e.g.. audio chat). The "web client" is a very basic client to the application 
which enables users with nothing more than access to a forms-enabled browser to send 
anyone in the community a page. There is no requirement of being able to receive 
pages via the web etc. The web client may optionally also enable the user to switch the 
profile currently being used. Optionally, the web client may enable users to view the 
contents of their inbox and read received messages. The "phone client" is a client 
which allows the user to phone a given number (a la voice mail) and switch the profile 
currently being used. 

There can be, e.g., two categories of users thai access die application. For 
paying customers (i.e., telco end users) the requirement is made that no matter where 
they log on to the application, the user experience is identical (i.e., no data is stored at 
the client side). This requirement is not made for Internet end users. 

Back-end adrnimstration can be manageable at least through command-line tools 
or equivalent and optionally through user-interface tools. How registration of users is 
handled may be decided on a per-telco basis; in one case it might be through the explicit 
entering of data and running of adrninistration tools by a telco employee, in another it 
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nugnt be through a COI script or equivalent running *e administratis tools mm data 

gathered directly from the user. 

One aspect on the tack-end regarding ainnnstrationU 4= logging of 

Monition. It may be possible to log every detail regarding the operation of the system 
which might be pertinent to the operas. Which details are logged shall be 
configurable via an adorinisttadonB*!. It shall be possible to easily import log data 
ftom the system into other software packages for analysis and arctevmg. 

have well-defined interface, totherestofthesysKmandbeas self-contained as 
possible, thus facihtoting a plug-inmethodology inme inmlemenuUon of the system. 
TOs is so «he implementation of the various pans of, for example, telephony 
mtegranon.canbesr^^^veralser^ groups. U is also rnade for future 
c^patfbDity with as^-now unrelated systems. e.g.. me conversational agent 



technology. 



^userinforn^ononeveryuserin^connnunity. I***-**"?* 

groups or inverses of groups along who users and combining these with boolean 
ZLcs. Users do not have m be able to browse the address book (i.e., page trough 
« in all embodiments. T*cy can however be able to fad users in the address book 

25 namefields. ^^V^^*^^^^^^ . 

H many users in the address book fit the search patfcru. the user who initiated the search 
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additional information on each user as can be given. For example, once user 
Snooglepops has found user Muffin in the address book, Snooglepops can add Muffin 
to bis personal buddy list (i.e^ contact list) and also can send Muffin a page without 
adding him/her to the buddy list, as well as being able to request that Muffin join a 
conference. 

The buddy list (a** contact list) is a set of users. These users can be organized 
into a hierarchy of groups by the user. Users may occupy more than one group. The 
user can create and destroy groups, and add users to or remove them from groups, as 
well as being able to move or copy users between groups and move groups from one 
place in the hierarchy to another. Groups are containers for users and groups. The 
following groups exist by default: 

Tabled 

Everybody V : m»mi»caiBpcM^^^^^.^^ 
: "' same community/ whetheruiey are currently on-hne or 
noi This group is not vislbfeiia the user interface, but 
can be used when specifying access to data- 
Buddies This is the sum of all your buddies, the root of the 
buddy list hierarchy. 



-A-"". 




able 

always showing them that the user is off-fine) and i 



no 

MHJW1UH U1WUI mm+£~ m — - ' 

: W . 



.. mjessages from users in tois^rijup ever reach the user 



-. I . . .» . ; .' 



- (aitoough 'to the amioying user sending the message 
*0 nothing will indicate that foeniessage was not 
* J revived). This group is nip* part of the buddy list 
hierarchy but in a separate Jrierarchy. 

Fre<iu CT t~ 

contacts sent pages or initiated conferences with, where X is a 
user-settable preference. This group cannot be used for 

access control. 

A user can have the option of getting a notification whenever another user adds 
him/her to the other user's buddy/contact list. Moreover, by glancing at the buddy list. 
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the user can see the onltne status o ^ well as providing an optional 

user-settable audio notificadon. The user can view 
address book for any user in his/her buddy list. 

buddy list and to any user that he/she finds * , g online statns 

- u« «„. receiving user depends on tne recipient » 

- ^onwheAcrornothehasnadehmBdfm^Wc ^ ^specify. 

10 GSM phone number capab* of recess SMS « ^ ^ ^ 
^fonowi-g-ys^se^lc): 1) The «r te fo^nied to to GSM 

.... w„ let through to the client by the user's RS 33 be torwaruc 

me ssages to use as the body of .he ™ ^ ,„ add the paging 

user to his/her buddy list and also to reply to this easy nwaos for that user to 

messages may be denoted urgent- ^^^^''^ers and individual 

users. The total number of users that it is possiui 
to prevent use of this feature for spanuning. 
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There can be two different user interfaces for initiating conversations or sending 
messages to another user, one for inexperienced users and one for experienced users. 
The one for inexperienced users may take more time to operate but can be easier to use 
with more helpful Ascriptions of actions and more pictures etc. to help the user along. 

The user's client preferably can display a list of all past outgoing and mcoming 
messages, along with at what date and time they were sent, to/from whom, and what the 
contents were. The user shall be able to delete messages from this log to save space. 
The user shall be able to limit the messages displayed by one of two criteria, or a 
combination of both: whether they were outgoing or incoming, and to/from which user 
they were. Also, it may be possible to display only actual messages (no notifications). 

Short text messages (STMs) sent to a user's inbox can be readable dinM^y from 
the Inbox. In the case of notification messages which notify of the delivery of a 
message to some message repository, it may be possible for the user to ask for the 
application to retrieve the message. The application can then check the message 
repository for whether the message still exists, and retrieve the message if possible. 
This can be possible in some cases for voicemail and email, but not for fax messages. 

A user can set up an assortment of stock messages ("I'm away". 'Tm busy", 
etc.). An automatic reply is when one of these stock messages is used automatically by 
the application on behalf of the user. Every user can have an online status which 
defines whether or not that user can be reached and which auto-reply is used when 
another user pages him/her (possibly no auto-rcply is used and the user is free to answer 
for himseia For this version of the application, there can be a fixed set of online 
statuses for a user to choose between, as in Chan 7 below: 

Chart7. 




Onlme but " Only urgent messages get through immediately. 
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occupied others are auto-replied with a stock message the 

user can choose and will be shown to the user 
when he changes to the "online and available" 
mode. 

m^&m ? Messes do not get ^^^^'J^L 

^.t' ' ' : :< ! : Pv- ^ =^ ' to lJiitn while in this 
Off-line, not Same as previous, 

available 

The user may specify users or groups of users that can set through to him/her 
eveninusonlinesamsisdonotdis.ttrb. Any of the groups defined nt the buddy tost, 
or the inverse (i.e., all use* no. in me group) of those groups, may be used to spec* 
Ons Tfcere can be one generic ready-made stock reply for each online state, available. 
Ttoe can also be one ready-made stock reply for each onUne stams which indicates that 
fte message has been forwarded or duplicated to die user's GSM phone ftrough SMS. 
The user can choose whether or not to >et senders of nwssages lo^w tltat tneir message 
wasrouu^tohis/herGSMphone. No requirement is made of being able to answer 
usages using SMS, or of being able to send a message from an SMS system n> a user. 

Witt, regard to text conferencing, a user 7 can send any user on his/her buddy list 
or any user that he/she finds using .he address book a request to join a text chat 
conference hosted by .he onginaUng use, The request may be accompanied by the 
user" s explanation of why it is made. When receiving a request to join a chat 
conference, the receiving user can choose to join the conference or not to jom me 
conference, or can choose to ignore the request (mis is what happens when you are 
invisible to a user, and that user invites you to a conference). The user's response may 
beacconn^edbyhisrea^forresrxn.Engas he/shedoes. Once a conference has 
started, me originating user has special privDeges within the conference, and can urn* 
additional users to die conference (may be accompanied by an explanation), ttck users 
from fte conference (may be accompanied by an explanation), and/or give or take away 
the right to speak in the conference. All users in the conference can use text tc chat. 
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and the conference shall display a history of the messages sent by the different users 
(e.g., IRC etc.). All users can also emote (as in IRQ their feelings in an easy way, i.e., 
to let other users know they're smiling. Text conferences may be able to handle at least 
20-30 users. When the user with special privileges quits the conference, the conference 
is preferably d^banded-m certam 

In voice conferencing embodiments, a voice coherence is a text conference with 
the added ability to chat using voice. When multiple users speak at once, their separate 
mputsaierxuxedtogemertofc^theoumut Audio quality may be dependent on the 
codec used and possibly on the bandwidth available. It is presumed but not a 
requirement that the GSM codec will be used. Only users who have the capability to 
receive and send voice signals can participate in a voice conference. 

As for video cc^erencing between useis 7, a video conference is a voice 
conference with the added ability to see the user who is currently speaking loudest 
Only users who have the capability to receive and send voice and video signals can 
participate m a video conference. Another option can be the implementation of Web 
Conferencing between users 7. 

The appbeation is aimed at users who have access to the Internet and an account 
with a telephone company, and have received their application from the telephone 
company. These users are anything from novices to veterans who wish to use the 
Internet for communication. The application is also aimed at users who have access to 
the Internet and have received their application over the Internet (not through a 
telephone company). These users are anything from novices to veterans who wish to 
use the Internet for communication. 

In practice, cotraminity operators ate the technical people at a telephone 
s company. They^beiapectedto u^cormr^d-Iinetookto 

set up supporting gateways and servers, etc. and are trained in doing this kind of job. 
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^.^.-.nK for a client of a user 7 may be as 
!„ cer tain embodiments, end user requirements tor a ci 



follows: 



10 



15 



20 



. bandwidth for voice depending 

• 28.8 baud modem ct>nii6caoii,m^^ aw ^ 

on codec 

. W «low S 95 0 r»ew«.Windo W sNTcr B e W -.W- m *» W sCEor 
MacOS operating system 

t 

nn Windows NT and several of the mainstream 
The back-end software can run on Windows m anu t 

o, - \ i»«n scale well as more money ts thrown at 
TT - v ftneratine systems (at least Solans). It can scale weu 
Unix operating sys v lessors amount of memory, amount of 

the server machines (numbei/speed of processors, amo 

bandwidth, speed of I/O). 

^dardfloppydiskO^Mb). Theapphcauoucanhaveanw 
and i« UI can be responsive undo all circumstances. 

^ overall robustness of (he cUent-side appUcaoon .nay be con^l* » ota 

are relevant to him in plain language. Offerer J 

. ~* Nortfy the user when the application * 
m cases of a lost coanecuon. 2) Noufy* ^ ^ ^ rf 

software has teen updated, and port to user place ^ 

At .•»-. the client software can automatically oownioau 
,„e client software; and/or 3) the cUent so b^"** 1 
newversionsofitselfv^itiscorme.mngaodfu^thattt.e PP 

has been updated. 
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Therefore, wMle the present invention is described in relation to preferred 
example embodhnents, it is u> be understood that this disclose is only iUustrative and 
exexnplaryofthepresentinvention. A ««^.lii.l^^^ to « tabo 
limited only by the scope of the claims appended hereto. 
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.^HATISCXAIMEDIS: 
perfuming user services and an rara-clusw serv 

cluster servers in other clusters; ,. v,»ufiM service for a first user 

assig^tosaidfirstdusur.^^--- ^ 
^servicefor.secondusera^^ ^^ eor ^ tto 

wh erein the first user can so* . ^^^^.he 
^^userwi^t^ow^of^o^ c ^ of ^^ 

^iu^lu^serverinsaidsecoodclus^^^^"" 

u cluster.and .^second user to the user server of said second 

dusterfc^ardsthctovi.adcmn^c.reou^^the 

^ • a. Mient of the second user comprises one 
2. Toe network of claim 1. wherein the client 

. /w->> , minle phone, and a pager. 
w of a personal computer (PC), a mooue p 

>, .h,« e r further comprises at least one 

counecUon server for connecung * d-r» £ ^ ^ _ 

each cluster further comprises » database from whtch us 
25 information. 

• ^ .....rter includes a plurality of user 
4 The network of claim 3, wherein each cluster rncl P 

a „ n iur^iitv of connection servers, 
M . plurality of servers, and a pluraltty 
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5. The network of claim 1, wherein in each cluster said user server performs 
routing services for respective users and enables respective users to monitor online 
statuses of other selected users in the network: 



6. The ne^ork of claim l,wher^ 
cluster and given a unique user identification (UID) that includes a cluster identifier 

idem 



ilCI <U1LI £ITW*» «* — — * — ^ : " 

aitying only the first cluster, such that the UID of the first user constitutes a globally 

unique ID within the network; and 

wherein the second user is registered with the second cluster and given a unique 
io user identification (UID) that includes a cluster identifier identifying only the second 
cluster, such that the UID of the second user constitutes a globally unique ID within the 
network, 

7 The network of claim 1. wherein, the fir* user is using a personal 

u^toconuHualcatt^one™ 1) tex.cto.usmg 

PC lo PC «ttnnuinicatiori, .2) voice chat using PC to PSTN phone communication, and 
3) voice chat using PC to mobile phone communication. 

computer (PC) as a client, the first and second clusters enable the firs, user and second 
user to communicate with one another in each of the additional follow manners: 4) 
pages using PC to PC communicadon, 5) pages using PC to SMS communication, and 
6) web conference. 



25 



9. A method of creating a cemmronication session between first and second 
users, the method comprising the steps of : 

a client of the first user creating a communication session in a user server of the 

first user, 
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second user, through at least one intermediate server, — 

a routing service of toe second user on 0* user of the second user 
forw^g^tavi^on^s^t.acto.of^seco^user.and 

me communication session. 

,0 Tne method of claim 9. wherein each of the user server of Ae first user, the 

^c^of servers, andwhereine^^ 
identifiers (UIDs) which include a cluster identifier merem. 

U i^xne^ofclauaS.whereta^c^^ 

^ ^ hy *e second user, and the firs. «er need no, Know of ehen. 

oeing used b, tb. second user a, the tin* *° invitattonn*^** 

12 Tne method of claim 9. wherein said step of the cheat of ttre firs, user 

• «f cftcond user, through at least one 
sending the invitation message to auser server of the second user. V ^ 

intermediate server, does not require that the first user or m 

_ _ .j^ 0 * *u~ second user such as an IP address or a phone 
server know a network address of the seconau 

■ c mov K- set uc between the first and second users 
number, whereby communications may be set up oeiwec 

25 whtteinaintair^^ 

13 . Amemodofestab^^ 
users, the method comprising the steps of : 
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providing at least one server cluster, and providing a user server for the first user. 

and a user server for the second user, 

a client of the first user sending an invitation message regarding the 
communication session to the user server for me second user via a connection server; 

the user server of the second server determining whether to forward the 
invitation message to a PC of the second user or a mobile phone of the second user 
depending upon an online status of the PC of the second user, and the user server of the 
second server forwarding the mvitaiion message to oneof the PC and the mobile phone 
accordingly; and 

the second user receiving the invitation message via the second the PC or mobile 
phone and accepting the invitation^ 

14. A network comprising: 

a first cluster and a second cluster, 

each of the first and second clusters including a plurality of user servers in 
communication with a database, at least one connection server for connecting to 
external user clients, and at least one intra-cluster server for coinrnunicating with other 

clusters of the network; and 

wherein the clusters enable a first user connected to me first cluster to establish a 
communication session with a second oser of me second cluster vvimout the fl^^ 
knowing an IP address or phone number of the second user. 

15 The network of claim 14, wherein the first user can send an invitation 
message regarding the session to the second user by utilizing a network user identifier 
(UTD) of the second user mat includes a cluster identifier. 

16. The network of claim 14. when the clusters and the network enable the 
communication session between the first and second users to be each of: 1) text chat 
using PC to PC communication. 2) voice chat using PC to PSTN phone communication. 
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and 3) voice chat using PC to mobile phone communication, depending upon the clients 
currently in use by the respective users. 

17. A method of logging on to and using a network including a plurality of 
cluster servers, the method comprising the steps of: 
providing a client being used by a user, 

providing a cluster including a connection server, at least one user server, a 
mapping function, and a database: 

the client sending a log on request to the connection server, 

the connection server checking an entered password for validity; 

the connection server requesting a user server ID from the mapping function, and 
the mapping function selecting a user server in the cluster for the user; 

the connection server setting an online status for the user on the selected user 
server; and 

the connection server subscribing to another user's online status so that the user 
can monitor the online status of the another user. 



1 8. In a network including a plurality of server clusters, a method of a first user 
monitoring a status of a second user, the niemc4 comprising the steps of : 

providing a client for the first user that is in communication with a fust 
connection server; 

providing a client for the second user that is in communication with each of a 
second connection server and a first user server, 

when the client for the second user logs on to the network, the second connection 
25 server forwarding states information indicative to 

the first user server forwarding information regarding the status of the second 

user to the first connection server; and 
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the first connection server forwarding information regarding the status of the 
second user to the client of the first user so that the first user can monitor the status of 
the second user. 

\*%.- *. 

19. The method of claim 1 8. further comprising the step of the second user 
adding second and third users of the network to a blinded list relating to the second user 
so as to prevent the second and third users from monitoring the status of the second 
user. 

20. The method of claim 18, wherein the status of the second user includes 
whether or not the second user is logged on to the network 



) 00691 40A1J_> 



WO 00/69140 



PCT/SEOO/00926 




WO 00/69140 



PCT/SE00/00926 



2/17 




FIG. 3 



SUBSTITUTE SHEET (RULE 26) 



WO 00/69140 



PCT/SE00/00926 



3/17 




SUBSTITUTE SHEET (RULE 26) 



^SISOOCID- <WO 00691 40A1_L> 



WO 00/69140 



PCT/SEOO/00926 



4/17 




User name! | joe®ipulse.ericssonicom 

Password: I ***************** 
Server: 1 172.22.1.57 | 
0 Save password 
OK I I Cancel | 



Fia 7 



.00691 40A1_L> 



SUBSTITUTE SHEET (RULE 26) 



WO 00/69140 



5/17 



PCT/SEOO/00926 




SBfJSSv--,. - Ill 




Sort bv Name ^ 








:— 0 Heimq 

i - # LeKjart 
Sammi 






0 # 






Sort by Nome V 



Fri ends 



-ft JH 
Le 
• ft Sa 



I 



iff Voice Chot 
Sib Text Chat 
O Phone Call 



FIG. 9 



FIG. 8 



Unreliable 
and unsecure 
network 



Operator 1 



server 1 server n 




19 



Reliable ^ 
and secure 
network 



Operator 3 



server 1 server n 



FIG. 10 



BNSOOCIO <WO_0068140AU_> 



SUBSTITUTE SHEET (RULE 26) 



WO 00/69140 



PCT/SE00/00926 



6/17 



To other clusters 




User 
Mapping 
Function: 



Connection Servers: 



MCU 
server 



Session 
server 



iPuise 
client 



iPuise 
client 



iPuise 
client 



Pulse 
client 



iPuise 
client 



FIG. 11 



M 1 M 1 Ml M 1 M 1 



MF I 


Mops: 




CIO: 


local. UID: 1-4 


—US 3 


CID: 


local, UID: 5-8 


—US 2 


CIO: 


local, UID: 9-11 


—US 3 


CIO: 


local, UID: 12-21 


—US 1 


CID: 


local, UID: 22-24 


—US 3 


CIO: 


local, UID: 25-26 


—US 2 


CID: 


local. UID: 27 


—US 3 


CIO: 


14, UID: all 


—ICS 2 


CID: 


19, UID: 0-29 


—ICS 1 


CID: 


19. UID: 30-90 


—ICS 2 


CID: 


24. UID: 0-32 


—ICS 1 


CID: 


24. UID: 33 


—ICS 2 



ICS 2 



Handles: 

CID: 14, UID: all 

CID: 19. UID: 30 through 90 

CID: 24. UID: 33 



US 3 



Handles: 

CID: local. UID: 1 through 4 

CID: local, IUD: 9 through 11 

CID: local, UID: 22 through 24 

CID: local, UID: 27 



Substitute sheet (rule 26) 



00691 4QA1_I_> 



WO 00/69140 



PCT/SE00/00926 



7/17 



Internet I 






Voice 
Gateway ' 






Media _ 
Proxy 



End- 
user 

dient 




out 

client 




Other 
cluster 




Can be 
run in or 
out of 
cluster 



21 

V 



Connection Server I 



Online Status 
Service Proxy 



552 

I ■«.*<, At 



Contact status 
service 



Lots of 
generic 

proxies 



Intro-Ouster 
Server . 



Lots pi 
generic 
proxies 



ifl 



55 
23 



Standard relational 
database such as 
Oracle or Informix 




FIG. 13 



User Id entification and Mapping 

UID 




FIG. 12(b) 



Unique per C1D 



SUBSTITUTE SHEET (RULE 26) 



BNSOOC1D <WO_0069140AU_> 



WO 00/69140 



PC17SE00/00926 



8/17 



User #1 Desires to send User #2 an INVITE message and 
thus looks up User #2's identifying information on User jjfVs 
contact list 



I 



151 



At User #1's request, User |1's client forms and sends out 
INVITE message to User #1's routing service 



I 



User §Vs routing service (RS) runs its outgoing routing 
logic and determines what to do with the INVITE 



159 



I 



User #1's RS sends INVITE 
to User #2's RS (in same 
or different cluster) 



I 



I 



153 



155 



User #1's RS ignores 
INVITE message 



157 



I 



■161 



User #2's RS runs its incoming routing logic and 
determines what to do with INVITE message 



163 



User f 2's RS forwards 
INVITE as an SMS 
message to User f 2's 
mobile phone or some 
other paging network 
device (e.g., if User 
|2 is not on-line) 



165 



User f 2's RS forwards 
INVITE to user f 2's inbox 

3 



User f 2 

deletes 

INVITE 



User f 2 
reads 
INVITE 



1 



I 



User §2 
marks 
INVITE as 
read/ 
unread 



I 



167 



User f 2's RS 
forwards INVITE 
to user f 2's 
client (e.g.. via 
a device 
handler) 



169 

_!_ 



User f 2's RS 
delivers INVITE 
to another 
user's RS 



173 



User f 2 ignores, accepts, 
or declines INVITE 
message request 



171 



The another user 
ignores, accepts, or 

declines INVITE 
message request 



FIG. 14 

SUBSTITUTE SHEET (RULE 26) 

_0069140A1J_> 



WO 00/69140 



PCT/SEOO/00926 



9/17 



Carl's client creates a Session in 
Carl's Session Service at Carl's 
User Server 



71 



Carl's client encodes address of 
session into an INVITE message 



73 



I 



Carl's client sends 
INVITE message to Anne 



75 



Decline 





Anne's client 
sends 
declining 
message 
to Carl 



T 

83 



Ignore 
INVITE 



79 



1 



Anne's client connects 
to the session 
encoded in the 
INVITE message 



81 



FIG 15 



SUBSTITUTE SHEET (RULE 26) 



NSDOC1D- <WO 00691 40A1J_> 



WO 00/69140 



PCT/SE00/00926 



10/17 



Subscription 



-UserlD : UserlD 



0..n 



updates 




User 



-Online : OnlineStatus 
—ID : UserlD 



FIG. 16 




1..1 



Subscription 
updates , , 



0..n 




1..1 



FIG. 17 



Contact 



-Online : OnlineStatus 
-10 : UserlD 



0..n 



0..n 



1..1 



ContoctUst 



-Version : Integer 



1..1 



0..n 



User 



-ID : UserlD 



SUBSTITUTE SHEET (RULE 26) 



_0069140A1J_> 



WO 00/69140 



PCT/SEOO/00926 



11/17 






User 




1..1 


—ID : UserlD 


1..1 





Access 



-ollOrOnly 
Boolean 

-version : integer 



parent 


0..n J 




1..1 


Group 


0..n 


-grid : GroupID 
-version : Integer 












^ 1..n 





1..1 



1..1 



Contact 



-uid : UserlD 
-communitvMember : Booteon 



1..1 



onlyThese 
(seeing) 



allButThese 
(blinded) 



1..1 



0..n 



Attribute 



-key : Stnng 
-volue : Stnng 
-data : Blob 



Fia 18(a) 



3MSOOCID <WO__00691 40A1_I_> 



SUBSTITUTE SHEET (RULE 26) 



WO 00/69140 



PCT/SE00/00926 



12/17 











String 
: Strin 
: Blob 




'ope 






-key : 
-value 
-qoiq 






rties 


ion 














2 


• * 




c 


c 






o 




a. 


i 








O 










CO 








* • 


















1 





CO 



3NSOOCIO <WO_0069140A1J_> 



SUBSTITUTE SHEET (RULE 26) 



PCT/SE00/00926 

WO 00/69140 



13/17 




NSDOCItX <WO__0069140A1J_> 



SUBSTITUTE SHEET (RULE 26) 



WO 00/69140 



PCT/SEOO/00926 



14/17 



client CS OB USclient USi CSi 



logoff 






unsubscribe 

users 




send status 
to subscribers 






logoff _ 


send status 
to subscribers 




save user data 









FIG. 20 



client U1 CSclient UScontoct CScontoct contact B1 



contact's status 


user status 

•4 


set status 


logon 


logoff 


set status 


user status 
•4 ; 


contact's status 








•4 



FIG. 21 



SUBSTITUTE SHEET (RULE 26) 

.00691 40A1_I_> 



WO 00/69140 



PCT/SEOO/00926 



15/17 



client CSclient 
add contact 



USclient 



OB 



UScontact CScontact contact 



contact 
status 



remove 
contact r 



od d contac^ 



user 
status 



remove 
contact 



update 
contact 
list ^ 



update 
contact 
list 



subscribe 
user 



added as 
contact 



unsubscribe, 

user _ | removed as 
contact 



FIG. 22 



added as 
contact . 



removed as 
contact 



client 



CSclient USclient 



DB 



add blinded 



remove 
blinded 



CSblinded blinded 



add blinded 


update 
blinded 
list r 


user 
status 


remove 
" blinded 




update 
blinded 
list ^ 


user 
status 








■ 



RGL 23 

SUBSTITUTE SHEET (RULE 26) 



contact 
status 



contact 
status 



INSOOCID- <WO _0069140A1_L 



WO 00/69140 



PCT/SE00/00926 



16/17 



client CSclient USclient OB CSblinded blinded 



invert 
blinded list 


invert 
blinded list 


update 
blinded 
list 


user 
status 


contact 
status 




— , — . ^ 











FIG 24 



ACTION 


RESPONSIBLE SERVER 


Retrieve contact list and blinded list 


US 


Add/remove contact in contact list 


US 


Add/remove blinded user in blinded list 


US 


Invert blinded list 


US 



FIG. 25 



0069140A1_I_> 



SUBSTITUTE SHEET (RULE 26) 



WO 00/69140 



17/17 



PCT/SE00/00926 




BNSDOC1D <WO 00691 40A1J_> 



SUBSTITUTE SHEET (RULE 26) 



i 



INTERNATIONAL SEARCH REPORT 



Into :ionaJ Application No 

PCT/SE 00/00926 



A. CLASSIFICATION OF SUBJECT MATTER 

IPC 7 H04L29/0O G06F17/3O 



According to international Patent Classification QPC) or to both national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbots) 

IPC 7 H04L G06F 



Documentation sai 



arched other than minimum documentation to the extent that such documents am included m the fields searched 



Electronic data base consulted during the international search (name o# date base and. where practical, search term, used) 

EP0- Internal 



C, DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* Ctabon of document, 



Vindication, where a ppr o priate , of the relevant passages 



Relevant to claim No. 



EP 8 478 485 A (IBM) 

1 April 1992 (1992-64-01) 

column 2, line 49 -column 3, line 22; 

claims 1-3 

abstract 

US 5 544 322 A (LUAN SHYH-WEI ET AL) 

6 August 1996 (1996-08-96) 

column 3. line 11 - line 67 

column 4, line 19 -column 5, line 63; 

claims 1-6 

US 5 748 736 A (MITTRA SUV0) 

5 May 1998 (1998-05-05) 

column 4, line 6 -column 5, line 56; 

claims 1-19 

abstract 

-/-- 



1-20 



1-20 



1-20 



m 



Further documents are Bated in the continuation of box C. 



Patent family members an* fisted in annex. 



* Special categories of cited documents : 

•A* document defining the general state of the art which is not 

considered to be of particular relevance 
*E* earlier document but published on or after the international 

filing date 

•L- document which may throw doubts on priority ctajm(s)or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

•Or document referring to an oral disclosure, use, exhibitioner 



•p* document pubSshed prior to the international filing date but 
later than the priority date claimed 



T* later document published after the international filing date 
or priority date and not in cwrrftict with the application but 
cited to understand the principle or theory underlying the 
invention 

•X" document of particular relevance ; the claimed invention 
cannot be considered novel or cannot be considered to 
invorve an inventive step when the document is taken alone 

•Y" document of particular relevance; the olakned invention _ 
cannot be considered to invorve an inventive step when the 
document is combined with one or more other docu- 
ments, such combination being obvious to a person eMfled 
in the art. 

•V document member of the same patent famiry 



Date of the actual m uni ti o n of the international search 



22 August 2000 



Date of mailing of the international search report 

0 9. 10. 2000 



Name and mailing address of the ISA 

European Patent Office, PS. 5818 Patenttaon 2 
NL-2280 HVRfswijk 
Tel (+31-70) 340-2040. Tx. 31 651 epo nl. 
Fax (431-70) 340-3016 



Authorized offio 



R. Bou Faisal/LR 



Fonn PCT/1SAS10 (ucond thoet) (July 1892) 



page 1 of 2 



JNSDOCID: <WO 0069 1 40A 1_l_> 



INTERNATIONAL SEARCH REPORT 

[ (^Continuation) DOCUMENTS CONSIDERED TO BE HfcUfcVAHi 

Category* I Citation of document, with indioation.wh^ appropriate, of the relevant passages 

"Using Hyperflow for Secure Internet 
Server Clusters" 

CYBER IQ SYSTEMS, . - . . 

- December 1998 (1998-12) pages 1-16, 

XP002901205 

Retrieved from the Internet. 
<URL: http : //www - hoi ontech . com/pdf / «cure_c 
lusters. pdf.> [retrieved on 2000-08-ZZJ 
the whole document 

US 5 884 322 A (ANDREWS RICHARD F ET AL) 
16 March 1999 (1999-03-16) 
column 8, line 65 -column 10, line 16, 
claims 1-6 

EP 0 865 180 A (LUCENt'tECHNOLOGIES INC) 
16 September 1998 (1998-09-16) 
abstract 



Intr Uonal Application No 

PCT/SE 00/00926 



Relevant to c4aim No. 



1-20 



1-20 



1-20 



Form PCT/1SA/210 (continuation ot ■ 



1 ahest) (July 1992) 



page 2 of 2 



NSDOCID- <WO__0069 1 40A 1 J_> 



INTERNATIONAL SEARCH REPORT 

formation on patent family members 



Inf tional Application No 

PCf/SE GO/00926 



Patent document 
cited in search report 



Publication 
date 



Patent family 
members) 



Publication 



EP G478485 


A 


01-04-1992 


US 


5222242 


A 


22-06-1993 






JP 


2059251 


C 


10-06-1996 








JP 


4227145 


A 


17^08-1992 








JP 


7093625 


B 


09-10-1995 


US 5544322 


A 


06-08-1996 


NONE 








US 5748736 


A 


05-05-1998 


NONE 








US 5884322 


A 


16-03-1999 


NONE 








EP 0865180 


A 


16-09-1998 


CA 


2230550 


A 


14-09-1998 



Form FCT/ISA/ZIO (patent family arawx) (July 1992) 



INSDOCIO <WO 006914QA1 I > 



(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



CORRECTED VERSION 



(19) World Intellectual Property Organization 
International Bureau 




iiiiinifflniiiDiiiiiiiiiDiiii 



(43) International Publication Date (10) International Publication Number 

16 November 2000 (16.11.2000) pCT WO 00/69140 Al 



(51) International Patent Classification 7 : H04L 29/00, 
G06F 17/30 



(74) Agent: JOHANSSON, Henrik; Albihns Stockholm AB, 
Box 5581, S- 114 85 Stockholm (SE). 



(21) International Application Number: PCT/SE00/00926 

(22) International Filing Date: 10 May 2000(10.05.2000) 

(25) Filing Language: English 

(26) Publication Language: Fjiglish 



(30) Priority Data: 
«V133,401 



10 May 1999 (10.05.1999) US 



(71) Applicant: TELEFONAKTIEBOLAGET LM ERICS- 
SON (pnbi) [SE/SE]; S-126 25 Stockholm (SE). 

(72) Inventors: GUDJONSSON, Gudjon, M.; Skalholtsstigur 
7, IS-101 Reykjavik (IS). EM1LSSON, Kjartan, Pierre; 
Sdrlaskjdl 22, IS-107 Reykjavik (IS). 



(81) Designated States (national): AE, AG, AL, AM, AT, AU, 
AZ, BA, BB, BG, BR, BY, CA, CH, CN, CR, CU, CZ, DE, 
DK, DM, DZ, EE, ES, FI, GB, GD, GE, GH, GM, HR, HU, 
ID, IL, IN, IS, JP, KE, KG, KP, KR, KZ, LC, LK, LR, LS, 
LT, LU, LV, MA, MD, MG, MK, MN, MW, MX, NO, NZ, 
PL, PT, RO, RU, SD, SE, SG, SI, SK, SL, TJ, TM, TR, TT, 
TZ, UA, UG, UZ, VN, YU, ZA, ZW 

(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, SD, SL, SZ, TZ, UG, ZW), Eurasian patent 
(AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), European patent 
(AT, BE, CH, CY, DE, DK, ES , FI. FR, GB, GR, IE, IT, LU, 
MC NL, PT, SE), OAPI patent (BF, B J, CF, CG, CI, CM, 
GA, GN, GW, ML, MR, NE, SN, TD, TG). 

Published: 

— With international search report. 

[Continued on next page] 



(54) Title: A DISTRIBUTED SYSTEM TO INTELLIGENTLY ESTABLISH SESSIONS BETWEEN ANONYMOUS USERS 
OVER VARIOUS NETWORKS 



Database 




Various 
Services 



Connection 
Service 



Device Handler 



^ (57) Abstract: A network provides users with a simple and secure way of establishing communication sessions with other users or 
^ services, running either over IP networks or other networks, e.g., PSTN. A plurality of different clusters of servers is provided, and 
each of the clusters may be linked together. Users are registered within some specific cluster and given a unique system/network ID. 
Messages are not sent directly between users, but instead through at least one intermediate routing service (RS) provided on a server 
5? of one of the users. Thus a user may hide or mask his/her personal information from other users even when communicating with 
mem. A user may establish a communication session with another user without knowledge of the client device (e.g., PC, mobile 
phone, etc.) being used by the other user, as the network arranges for communication (e.g., text chat session, voice chat session, web 
conference, or pages between the users regardless of the client device being used by die called user. The in itia t i n g user need not 
know whether die other user is currently online via his/her PC or may instead be reached via pager or mobile phone. 
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' ^ - „. Fnr two-letter codes and other abbreviations, refer to the "Guid- 

(48) Date of publication of this corrected verMon^ and Abbreviations" appearing a, the begin- 

ning of each regular issue of the PCT Gazette. 

(15) Information about Correction: 

see PCT Gazette No. 21/2001 of 25 May 2001, Section E 



3NSDOCID <WO 00691 40A1JA> 



